From 5234d2af963320b3b007ced976d87279a812c6b1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Greg=20Berg=C3=A9?= <berge.greg@gmail.com>
Date: Sat, 16 Nov 2024 09:37:51 +0100
Subject: [PATCH] fix: fix CSP for GitLab images

Fix ARGOS-BROWSER-9H
---
 apps/backend/src/web/app.ts | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/apps/backend/src/web/app.ts b/apps/backend/src/web/app.ts
index dbcb75a7b..442ff1236 100644
--- a/apps/backend/src/web/app.ts
+++ b/apps/backend/src/web/app.ts
@@ -65,9 +65,12 @@ export const createApp = async (): Promise<express.Express> => {
             "'self'",
             "data:",
             "https://argos-ci.com",
+            // TwicPics images
+            "https://argos.twic.pics",
+            // GitHub and GitLab avatars
             "https://github.com",
             "https://avatars.githubusercontent.com",
-            "https://argos.twic.pics",
+            "https://gitlab.com",
           ],
           "script-src": [
             "'self'",