doomtube/beeta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Initial commit - realms platform

Browse source
This commit is contained in:
doomtube 2026-01-05 22:54:27 -05:00
parent c590ab6d18
commit c717c3751c
234 changed files with 74103 additions and 15231 deletions
Download patch file Download diff file Expand all files Collapse all files

21
frontend/svelte.config.js
View file

@ -15,23 +15,28 @@ const config = {
mode: 'auto',
directives: {
'default-src': ["'self'"],
'script-src': ["'self'", "'unsafe-inline'"],
'script-src': ["'self'", 'https://www.youtube.com'],
// Note: 'unsafe-inline' required because Svelte uses inline styles for transitions and dynamic bindings
'style-src': ["'self'", "'unsafe-inline'", 'https://cdnjs.cloudflare.com'],
'img-src': ["'self'", 'data:', 'blob:'],
'font-src': ["'self'", 'data:', 'https://cdnjs.cloudflare.com'], // Added 'data:' for embedded fonts
'img-src': ["'self'", 'data:', 'blob:', 'https://img.youtube.com', 'https://i.ytimg.com'],
'font-src': ["'self'", 'data:', 'https://cdnjs.cloudflare.com'],
'connect-src': [
"'self'",
'ws://localhost:*', // Changed to include port wildcard
'wss://localhost:*', // Changed to include port wildcard
'http://localhost:*'
"'self'",
'ws://localhost:*',
'wss://localhost:*',
'http://localhost:*',
'ws://127.0.0.1:*',
'wss://127.0.0.1:*',
'http://127.0.0.1:*',
'https://www.youtube.com'
],
'media-src': ["'self'", 'blob:', 'http://localhost:*'],
'frame-src': ["'self'", 'blob:', 'https://www.youtube.com'],
'object-src': ["'none'"],
'frame-ancestors': ["'none'"],
'form-action': ["'self'"],
'base-uri': ["'self'"]
}
},
// Enable CSRF protection (default is true)