diff options
| author | Christophe Besson <cbesson@gmail.com> | 2026-09-30 13:09:47 +0200 |
|---|---|---|
| committer | Christophe Besson <cbesson@gmail.com> | 2026-09-30 13:09:54 +0200 |
| commit | 87725dc7a2da27c2ca3b9e58af751f0e6f8c9de7 (patch) | |
| tree | 4bb433e12a959d497d537c5cf3abec993795daee /packages/meshbay-hub/src/meshbay_hub/api/notifications.py | |
| parent | 2c6921aa2c35ffd41b6c453e6700574ef631ba2c (diff) | |
| download | meshbay-87725dc7a2da27c2ca3b9e58af751f0e6f8c9de7.tar.gz | |
fix: the page connects to its own origin and reCAPTCHA, nowhere else
connect-src drops https: and wss: in both policies. Checked against Google's
reCAPTCHA test keys: in Chrome widget, token and registration unchanged; in
Firefox the widget loads; no violation reported in either.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Diffstat (limited to 'packages/meshbay-hub/src/meshbay_hub/api/notifications.py')
0 files changed, 0 insertions, 0 deletions