From 2f00e1fe2c171af44062427ebe3531bd8e621cd8 Mon Sep 17 00:00:00 2001
From: Christoph Reiter <reiter.christoph@gmail.com>
Date: Fri, 20 Dec 2024 14:30:26 +0100
Subject: [PATCH] Revert "CSP: add www.a-trust.at as well"

This reverts commit 4c51ec7199b816363ae089811ff562694eaf41aa.

The error page can't be shown in an iframe, so that redirect was
probably not on purpose, and it's fine to just fail before loading the page.
---
 rollup.config.js | 1 -
 1 file changed, 1 deletion(-)

diff --git a/rollup.config.js b/rollup.config.js
index 4ff37c17..88745353 100644
--- a/rollup.config.js
+++ b/rollup.config.js
@@ -124,7 +124,6 @@ function getOrigin(url) {
 const atrustHosts = [
     'https://www.handy-signatur.at', // old one
     'https://service.a-trust.at',
-    'https://www.a-trust.at', // sometimes used for error pages redirects
 ];
 
 config.CSP = `default-src 'self' 'unsafe-inline' \