Fix: Use dynamic URLs for all frontend connections

- CSP: Allow WebSocket/HTTP connections to any domain (for production)
- Nakama: Detect host/SSL from browser location instead of hardcoded localhost
- WebSocket: Dynamic protocol/host detection for stream and watch sync
- HLS/LLHLS/WebRTC: Dynamic URLs in live page and stream components
- RTMP/SRT: Show actual domain in my-realms settings page
- Forums: Use numeric forum ID for banner/title-color API calls

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
doomtube 2026-01-06 04:45:39 -05:00
parent e26fd346f3
commit 118629549e
9 changed files with 121 additions and 28 deletions

View file

@ -22,15 +22,13 @@ const config = {
'font-src': ["'self'", 'data:', 'https://cdnjs.cloudflare.com'],
'connect-src': [
"'self'",
'ws://localhost:*',
'wss://localhost:*',
'http://localhost:*',
'ws://127.0.0.1:*',
'wss://127.0.0.1:*',
'http://127.0.0.1:*',
'ws://*:*', // Allow any WebSocket
'wss://*:*', // Allow any secure WebSocket
'http://*:*', // Allow any HTTP (for dev and streaming)
'https://*:*', // Allow any HTTPS
'https://www.youtube.com'
],
'media-src': ["'self'", 'blob:', 'http://localhost:*'],
'media-src': ["'self'", 'blob:', 'http://*:*', 'https://*:*'],
'frame-src': ["'self'", 'blob:', 'https://www.youtube.com'],
'object-src': ["'none'"],
'frame-ancestors': ["'none'"],