CSP subdomain wildcard for blockstack

GiovanniBordiga · May 10, 2019 · 5e069d2 · 5e069d2
1 parent 85a7e0e
commit 5e069d2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/backend/boltathon/app.py b/backend/boltathon/app.py
@@ -25,7 +25,7 @@ def create_app(config_objects=['boltathon.settings']):
     app,
     content_security_policy={
       'default-src': "'self'",
-      'connect-src': ["'self'", 'blockstack.org'],
+      'connect-src': ["'self'", 'blockstack.org', '*.blockstack.org'],
       'img-src': ['*', 'data:'],
       'font-src': ['*', 'data:'],
     },