Wrap default_connect_src as well

This commit is contained in:
MareStare 2025-03-04 03:25:09 +00:00
parent 2e56889740
commit 3296bc0a91

View file

@ -75,15 +75,10 @@ defmodule PhilomenaWeb.ContentSecurityPolicyPlug do
defp default_script_src(_host), do: "'self'"
end
defp default_connect_src(host) do
# Same workaround as in `default_script_src/1`
is_vite_hmr = vite_hmr?(do: true, else: false)
if is_vite_hmr do
"'self' #{host}:5173 ws://#{host}:5173"
vite_hmr? do
defp default_connect_src(host), do: "'self' #{host}:5173 ws://#{host}:5173"
else
"'self'"
end
defp default_connect_src(_host), do: "'self'"
end
defp default_style_src, do: vite_hmr?(do: "'self' 'unsafe-inline'", else: "'self'")