Merge pull request #12180 from Budibase/cloudfront-csp-fix

add cloudfront to script csp to fix cloud plugins
Budibase · Oct 26, 2023 · 0f8a34d · 0f8a34d
2 parents 87c1726 + 4bcc49b
commit 0f8a34d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/hosting/proxy/nginx.prod.conf b/hosting/proxy/nginx.prod.conf
@@ -51,7 +51,7 @@ http {
  proxy_buffering off;
 
  set $csp_default "default-src 'self'";
- set $csp_script "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.budibase.net https://cdn.budi.live https://js.intercomcdn.com https://widget.intercom.io";
+ set $csp_script "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.budibase.net https://cdn.budi.live https://js.intercomcdn.com https://widget.intercom.io https://d2l5prqdbvm3op.cloudfront.net";
  set $csp_style "style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com https://rsms.me https://maxcdn.bootstrapcdn.com";
  set $csp_object "object-src 'none'";
  set $csp_base_uri "base-uri 'self'";