Fix: Use dynamic URLs for all frontend connections
- CSP: Allow WebSocket/HTTP connections to any domain (for production) - Nakama: Detect host/SSL from browser location instead of hardcoded localhost - WebSocket: Dynamic protocol/host detection for stream and watch sync - HLS/LLHLS/WebRTC: Dynamic URLs in live page and stream components - RTMP/SRT: Show actual domain in my-realms settings page - Forums: Use numeric forum ID for banner/title-color API calls 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
parent
e26fd346f3
commit
118629549e
9 changed files with 121 additions and 28 deletions
|
|
@ -22,15 +22,13 @@ const config = {
|
|||
'font-src': ["'self'", 'data:', 'https://cdnjs.cloudflare.com'],
|
||||
'connect-src': [
|
||||
"'self'",
|
||||
'ws://localhost:*',
|
||||
'wss://localhost:*',
|
||||
'http://localhost:*',
|
||||
'ws://127.0.0.1:*',
|
||||
'wss://127.0.0.1:*',
|
||||
'http://127.0.0.1:*',
|
||||
'ws://*:*', // Allow any WebSocket
|
||||
'wss://*:*', // Allow any secure WebSocket
|
||||
'http://*:*', // Allow any HTTP (for dev and streaming)
|
||||
'https://*:*', // Allow any HTTPS
|
||||
'https://www.youtube.com'
|
||||
],
|
||||
'media-src': ["'self'", 'blob:', 'http://localhost:*'],
|
||||
'media-src': ["'self'", 'blob:', 'http://*:*', 'https://*:*'],
|
||||
'frame-src': ["'self'", 'blob:', 'https://www.youtube.com'],
|
||||
'object-src': ["'none'"],
|
||||
'frame-ancestors': ["'none'"],
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue