fix: fix CSP for GitLab images

Fix ARGOS-BROWSER-9H
argos-ci · Nov 16, 2024 · 5234d2a · 5234d2a
1 parent b0721b1
commit 5234d2a
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/apps/backend/src/web/app.ts b/apps/backend/src/web/app.ts
@@ -65,9 +65,12 @@ export const createApp = async (): Promise<express.Express> => {
             "'self'",
             "data:",
             "https://argos-ci.com",
+            // TwicPics images
+            "https://argos.twic.pics",
+            // GitHub and GitLab avatars
             "https://github.com",
             "https://avatars.githubusercontent.com",
-            "https://argos.twic.pics",
+            "https://gitlab.com",
           ],
           "script-src": [
             "'self'",