~aasg/haunted-blog

58094493f75901609f563c44b38861a3007bf336 — Aluísio Augusto Silva Gonçalves 2 months ago 713e195
flake/production: Allow simple CORS requests

Just found out (while investigating something else through Electron's
devtools panel) that the `/.well-known/matrix` endpoint requires CORS
even in Element Desktop.  See github:vector-im/element-web#7760 and
similar issues in the Element repository.
1 files changed, 1 insertions(+), 0 deletions(-)

M flake.nix
M flake.nix => flake.nix +1 -0
@@ 49,6 49,7 @@
          aasg-blog.production = final.aasg-blog.defaultPackage.overrideAttrs (drv: {
            nativeBuildInputs = drv.nativeBuildInputs ++ [ final.aasgBrotlifyHook ];
            snowwebHeaders = ''
              Access-Control-Allow-Origin: *
              Content-Security-Policy-Report-Only: default-src 'self'; form-action 'none'; frame-ancestors 'none'; report-uri https://aasg.report-uri.com/r/d/csp/reportOnly
              Cross-Origin-Opener-Policy: same-origin
              Referrer-Policy: no-referrer, strict-origin-when-cross-origin