From 3296bc0a918e90287c426e94a96bd7f552b719e1 Mon Sep 17 00:00:00 2001 From: MareStare Date: Tue, 4 Mar 2025 03:25:09 +0000 Subject: [PATCH] Wrap default_connect_src as well --- .../plugs/content_security_policy_plug.ex | 13 ++++--------- 1 file changed, 4 insertions(+), 9 deletions(-) diff --git a/lib/philomena_web/plugs/content_security_policy_plug.ex b/lib/philomena_web/plugs/content_security_policy_plug.ex index b4a72e8f..c9ff684e 100644 --- a/lib/philomena_web/plugs/content_security_policy_plug.ex +++ b/lib/philomena_web/plugs/content_security_policy_plug.ex @@ -75,15 +75,10 @@ defmodule PhilomenaWeb.ContentSecurityPolicyPlug do defp default_script_src(_host), do: "'self'" end - defp default_connect_src(host) do - # Same workaround as in `default_script_src/1` - is_vite_hmr = vite_hmr?(do: true, else: false) - - if is_vite_hmr do - "'self' #{host}:5173 ws://#{host}:5173" - else - "'self'" - end + vite_hmr? do + defp default_connect_src(host), do: "'self' #{host}:5173 ws://#{host}:5173" + else + defp default_connect_src(_host), do: "'self'" end defp default_style_src, do: vite_hmr?(do: "'self' 'unsafe-inline'", else: "'self'")