Skip to content

Commit f576581

Browse files
committed
[TOOL-3566] Dashboard: Add static.reo.dev in Next.js CSP settings (#6374)
<!-- start pr-codex --> ## PR-Codex overview This PR updates the Content Security Policy (CSP) in the `next.config.ts` file to include an additional source for `script-src`. ### Detailed summary - Added `static.reo.dev` to the `script-src` directive in the CSP. > ✨ Ask PR-Codex anything about this PR by commenting with `/codex {your question}` <!-- end pr-codex -->
1 parent f4ca73c commit f576581

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

apps/dashboard/next.config.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ const ContentSecurityPolicy = `
1212
style-src 'self' 'unsafe-inline' vercel.live;
1313
font-src 'self' vercel.live assets.vercel.com framerusercontent.com fonts.gstatic.com;
1414
frame-src * data:;
15-
script-src 'self' 'unsafe-eval' 'unsafe-inline' 'wasm-unsafe-eval' 'inline-speculation-rules' *.thirdweb.com *.thirdweb-dev.com vercel.live js.stripe.com framerusercontent.com events.framer.com challenges.cloudflare.com;
15+
script-src 'self' 'unsafe-eval' 'unsafe-inline' 'wasm-unsafe-eval' 'inline-speculation-rules' *.thirdweb.com *.thirdweb-dev.com vercel.live js.stripe.com framerusercontent.com events.framer.com challenges.cloudflare.com static.reo.dev;
1616
connect-src * data: blob:;
1717
worker-src 'self' blob:;
1818
block-all-mixed-content;

0 commit comments

Comments
 (0)