fix(observability): whitelist Sentry ingest in CSP connect-src #70
@@ -51,6 +51,9 @@ async function bootstrap() {
|
||||
"https://challenges.cloudflare.com",
|
||||
"https://destek.sase.tr",
|
||||
"wss://destek.sase.tr",
|
||||
// Sentry browser SDK envelope POSTs (otolog org, de region).
|
||||
// Without this CSP silently blocks every error/replay upload.
|
||||
"https://*.ingest.de.sentry.io",
|
||||
],
|
||||
objectSrc: ["'none'"],
|
||||
frameSrc: ["https://challenges.cloudflare.com", "https://destek.sase.tr"],
|
||||
|
||||
Reference in New Issue
Block a user