modify connect-src of Content Security Policy to include dynamic wss URL based on configured base URL

2020-01-17 17:47:09 -05:00 · 2020-01-17 17:47:09 -05:00 · 5ff6266a5e
commit 5ff6266a5e
parent e57fc1c2d8
2 changed files with 3 additions and 1 deletions
--- a/server/routes/index.js
+++ b/server/routes/index.js
@ -39,7 +39,7 @@ module.exports = function(app) {
            "'self'",
            'wss://*.dev.lcip.org',
            'wss://*.send.nonprod.cloudops.mozgcp.net',
-            'wss://send.firefox.com',
+            config.base_url.replace(/^https:\/\//, 'wss://'),
            'https://*.dev.lcip.org',
            'https://accounts.firefox.com',
            'https://*.accounts.firefox.com',