Add IDP_DOMAIN to the frame-src section in csp.yaml

When using an external IDP, not having the IDP FQDN in frame-src causes silent refreshes to get blocked.
This commit is contained in:
Simon
2026-05-20 14:32:37 +02:00
committed by GitHub
parent 2bb11ee1a5
commit 7cf59a62a9

View File

@@ -24,6 +24,7 @@ directives:
- 'https://${COLLABORA_DOMAIN|collabora.opencloud.test}${TRAEFIK_PORT_HTTPS}/' - 'https://${COLLABORA_DOMAIN|collabora.opencloud.test}${TRAEFIK_PORT_HTTPS}/'
# This is needed for the external-sites web extension when embedding sites # This is needed for the external-sites web extension when embedding sites
- 'https://docs.opencloud.eu' - 'https://docs.opencloud.eu'
- 'https://${IDP_DOMAIN|keycloak.opencloud.test}${TRAEFIK_PORT_HTTPS}/'
img-src: img-src:
- '''self''' - '''self'''
- 'data:' - 'data:'