Merge pull request #1417 from argos-ci/fix-csp-gitlab-images

fix: fix CSP for GitLab images
argos-ci · Nov 16, 2024 · 60a9440 · 60a9440
2 parents b0721b1 + 5234d2a
commit 60a9440
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/apps/backend/src/web/app.ts b/apps/backend/src/web/app.ts
@@ -65,9 +65,12 @@ export const createApp = async (): Promise<express.Express> => {
             "'self'",
             "data:",
             "https://argos-ci.com",
+            // TwicPics images
+            "https://argos.twic.pics",
+            // GitHub and GitLab avatars
             "https://github.com",
             "https://avatars.githubusercontent.com",
-            "https://argos.twic.pics",
+            "https://gitlab.com",
           ],
           "script-src": [
             "'self'",