Tria/edr-platform
1
0
Fork 0
mirror of https://github.com/Tria-plc/edr-platform.git synced 2026-08-27 00:52:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #530 from Tria-plc/freight/feat/chat-app

Browse Source 
fix: websocket fix attempt
This commit is contained in:
Nathnael Wondisha
2026-07-08 09:39:30 +03:00
committed by GitHub
parent 5ca01c546f 972b1e973a
commit 59b6f8d07a
2 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
apps/edr-passenger-web/backoffice/src/middleware.ts
View File

@@ -35,8 +35,12 @@ function buildCsp(nonce: string): string {
? `'self' 'nonce-${nonce}' 'strict-dynamic'`
: `'self' 'unsafe-inline' 'unsafe-eval'`;
// The Socket.IO WebSocket upgrade connects to wss://<api-host>; under CSP a
// `https://host` source does NOT cover `wss://host`, so add it explicitly.
const wsOrigin = apiOrigin.replace(/^http/, 'ws'); // https→wss, http→ws
const connectSrc = isProd
? `'self' ${apiOrigin}`.trim()
? `'self' ${apiOrigin} ${wsOrigin}`.trim()
: `'self' ${apiOrigin} ws: wss:`.trim();
const directives = [

6
apps/edr-passenger-web/portal/src/middleware.ts
View File

@@ -48,8 +48,12 @@ function buildCsp(nonce: string): string {
? `'self' 'nonce-${nonce}' 'strict-dynamic'`
: `'self' 'unsafe-inline' 'unsafe-eval'`;
// The Socket.IO WebSocket upgrade connects to wss://<api-host>; under CSP a
// `https://host` source does NOT cover `wss://host`, so add it explicitly.
const wsOrigin = apiOrigin.replace(/^http/, 'ws'); // https→wss, http→ws
const connectSrc = isProd
? `'self' ${apiOrigin}`.trim()
? `'self' ${apiOrigin} ${wsOrigin}`.trim()
: `'self' ${apiOrigin} ws: wss:`.trim();
const directives = [