diff --git a/apps/studio/next.config.js b/apps/studio/next.config.js index 8f38480999e..55a6ff08d0a 100644 --- a/apps/studio/next.config.js +++ b/apps/studio/next.config.js @@ -65,24 +65,22 @@ const csp = [ process.env.NEXT_PUBLIC_ENVIRONMENT === 'local' || process.env.NEXT_PUBLIC_ENVIRONMENT === 'staging' ? [ - `default-src 'self' ${DEFAULT_SRC_URLS} ${SUPABASE_STAGING_PROJECTS_URL} ${SUPABASE_STAGING_PROJECTS_URL_WS} ${VERCEL_LIVE_URL} ${SUPABASE_DOCS_PROJECT_URL};`, - `script-src 'self' 'unsafe-eval' 'unsafe-inline' ${SCRIPT_SRC_URLS} ${VERCEL_LIVE_URL} ${PUSHER_URL};`, + `default-src 'self' ${DEFAULT_SRC_URLS} ${SUPABASE_STAGING_PROJECTS_URL} ${SUPABASE_STAGING_PROJECTS_URL_WS} ${VERCEL_LIVE_URL} ${PUSHER_URL} ${PUSHER_URL_WS} ${SUPABASE_DOCS_PROJECT_URL};`, + `script-src 'self' 'unsafe-eval' 'unsafe-inline' ${SCRIPT_SRC_URLS} ${VERCEL_LIVE_URL};`, `frame-src 'self' ${FRAME_SRC_URLS} ${VERCEL_LIVE_URL};`, `img-src 'self' blob: data: ${IMG_SRC_URLS} ${SUPABASE_STAGING_PROJECTS_URL} ${VERCEL_URL};`, `style-src 'self' 'unsafe-inline' ${STYLE_SRC_URLS} ${VERCEL_LIVE_URL};`, `font-src 'self' ${FONT_SRC_URLS} ${VERCEL_LIVE_URL};`, `worker-src 'self' blob: data:;`, - `connect-src 'self' ${PUSHER_URL_WS};`, ] : [ `default-src 'self' ${DEFAULT_SRC_URLS};`, - `script-src 'self' 'unsafe-eval' 'unsafe-inline' ${SCRIPT_SRC_URLS} ${VERCEL_LIVE_URL} ${PUSHER_URL};`, - `frame-src 'self' ${FRAME_SRC_URLS} ${VERCEL_LIVE_URL};`, + `script-src 'self' 'unsafe-eval' 'unsafe-inline' ${SCRIPT_SRC_URLS};`, + `frame-src 'self' ${FRAME_SRC_URLS};`, `img-src 'self' blob: data: ${IMG_SRC_URLS} ;`, - `style-src 'self' 'unsafe-inline' ${STYLE_SRC_URLS} ${VERCEL_LIVE_URL};`, - `font-src 'self' ${FONT_SRC_URLS} ${VERCEL_LIVE_URL};`, + `style-src 'self' 'unsafe-inline' ${STYLE_SRC_URLS};`, + `font-src 'self' ${FONT_SRC_URLS};`, `worker-src 'self' blob: data:;`, - `connect-src 'self' ${PUSHER_URL_WS};`, ]), `object-src 'none';`, `base-uri 'self';`,