Allow CSP config in environment variables

planetary-social / rooms-frontend

MIT License

4 stars 2 forks source link

Allow CSP config in environment variables #47

Closed chereseeriepa closed 1 year ago

chereseeriepa commented 1 year ago

See: https://github.com/planetary-social/go-ssb-room/pull/3#discussion_r1009795293

The ContentSecurityPolicy has the graphql url hardcoded, so this isnt going to work when the graphql url changes.

"default-src 'self'; img-src 'self' https://graphql.planetary.pub data: ; connect-src 'self' https://graphql.planetary.pub"

[ ] this should be passed in as an environment variables instead

chereseeriepa commented 1 year ago

@rabble this is the task i was talking about, currently in the go-ssb-room vue branch. CSP config for the graphql server endpoint is hardcoded, so it just needs to be moved to an environment variable instead

chereseeriepa commented 1 year ago

@rabble I ended up doing it, it was simple just followed what other environment variables had done