Suppress CSP reporting for dev "hot reload"

LabKey · Feb 6, 2024 · 4fec7c3 · 4fec7c3
1 parent 7d1aa45
commit 4fec7c3
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/server/configs/application.properties b/server/configs/application.properties
@@ -176,11 +176,11 @@ spring.main.banner-mode=off
 # Default CSP for TeamCity and dev deployments
 #setupTask#csp.report=\
 #setupTask#    default-src 'self' https: http: ;\
-#setupTask#    connect-src 'self' ${LABKEY.ALLOWED.CONNECTIONS} ;\
+#setupTask#    connect-src 'self' localhost:* ws: ${LABKEY.ALLOWED.CONNECTIONS} ;\
 #setupTask#    object-src 'none' ;\
 #setupTask#    style-src 'self' https: 'unsafe-inline' ;\
 #setupTask#    img-src 'self' https: data: ;\
-#setupTask#    font-src 'self' https: data: ;\
+#setupTask#    font-src 'self' http: https: data: ;\
 #setupTask#    script-src 'unsafe-eval' 'strict-dynamic' 'nonce-${REQUEST.SCRIPT.NONCE}' ;\
 #setupTask#    base-uri 'self' ;\
 #setupTask#    frame-ancestors 'self' ;\