nextjs doesn't address csp headers for your websockets which is required for prod

GetStream / chat-app-in-5-frameworks

Building a chat app using 5 different frameworks: React, Angular, Vue.js, Svelte, and Next.js

https://youtu.be/o-am4BY-dhs

0 stars 1 forks source link

nextjs doesn't address csp headers for your websockets which is required for prod #1

Open 4cecoder opened 2 months ago

4cecoder commented 2 months ago

something like this should be in nextjs

          connect-src 'self' https://chat.stream-io-api.com wss://chat.stream-io-api.com ${process.env.NEXT_PUBLIC_API_URL || ''};

caineblood commented 2 months ago

The above comment asking you to download a file is malware to steal your account; do not under any circumstances download or run it. The post needs to be removed. If you have attempted to run it please have your system cleaned and your account secured immediately.