fix(observability): whitelist Sentry ingest in CSP connect-src #70

Merged
root merged 1 commits from fix/sentry-csp-connect-src into dev 2026-06-01 18:28:49 +03:00
Owner

Browser Sentry SDK initialised but envelope POSTs silently blocked by CSP — connect-src lacked any Sentry host.

Playwright verification confirmed: SDK loaded, __SENTRY__ carrier present (v9.47.1), error captured page-side, but zero network requests to *.sentry.io.

Adds https://*.ingest.de.sentry.io (otolog org, EU/de region — matches both python and sase-web project DSNs).

🤖 Generated with Claude Code

Browser Sentry SDK initialised but envelope POSTs silently blocked by CSP — `connect-src` lacked any Sentry host. Playwright verification confirmed: SDK loaded, `__SENTRY__` carrier present (v9.47.1), error captured page-side, but zero network requests to *.sentry.io. Adds `https://*.ingest.de.sentry.io` (otolog org, EU/de region — matches both `python` and `sase-web` project DSNs). 🤖 Generated with [Claude Code](https://claude.com/claude-code)
root added 1 commit 2026-06-01 18:28:48 +03:00
fix(observability): whitelist Sentry ingest in CSP connect-src
Some checks failed
QA Gate (P0/P1) / Test affected app (pull_request) Has been cancelled
778931c880
The browser Sentry SDK initialised fine (DSN reached the bundle,
__SENTRY__ carrier registered) but envelope POSTs were silently
blocked by the existing CSP — `connect-src` didn't list any Sentry
host. Playwright verification on dev.sase.tr confirmed zero requests
to *.sentry.io even after a deliberate uncaught error.

Adds https://*.ingest.de.sentry.io (otolog org lives in the EU/de
region; this matches both the python and sase-web project DSNs).
root merged commit c01987da7d into dev 2026-06-01 18:28:49 +03:00
Sign in to join this conversation.
No Reviewers
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: root/sase.tr#70