fix(headers): add connect-src csp for http

maevsi · Sep 27, 2022 · f61f321 · f61f321
1 parent d5e6aff
commit f61f321
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/nuxt/server/middleware/headers.ts b/nuxt/server/middleware/headers.ts
@@ -5,6 +5,7 @@ import { STACK_DOMAIN } from '~/plugins/util/constants'
 const csp: Record<string, Array<string>> = {
   'base-uri': ["'none'"], // Mozilla Observatory.
   'connect-src': [
+    `http://localhost:24678/_nuxt/`, // Nuxt development
     `ws://localhost:24678/_nuxt/`, // Nuxt development
     `https://${STACK_DOMAIN}/cdn-cgi/rum`, // Cloudflare real user management (browser insights)
     `https://postgraphile.${STACK_DOMAIN}`,