fix(observability): whitelist Sentry ingest in CSP connect-src #70

Merged
root merged 1 commits from fix/sentry-csp-connect-src into dev 2026-06-01 18:28:49 +03:00

View File

@@ -51,6 +51,9 @@ async function bootstrap() {
"https://challenges.cloudflare.com",
"https://destek.sase.tr",
"wss://destek.sase.tr",
// Sentry browser SDK envelope POSTs (otolog org, de region).
// Without this CSP silently blocks every error/replay upload.
"https://*.ingest.de.sentry.io",
],
objectSrc: ["'none'"],
frameSrc: ["https://challenges.cloudflare.com", "https://destek.sase.tr"],