Skip to content

fix: tighten whiteboard collaboration CSP#1263

Open
hweihwang wants to merge 1 commit into
mainfrom
fix/csp-collab-backend-and-fonts
Open

fix: tighten whiteboard collaboration CSP#1263
hweihwang wants to merge 1 commit into
mainfrom
fix/csp-collab-backend-and-fonts

Conversation

@hweihwang

@hweihwang hweihwang commented Jul 7, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Apply Whiteboard CSP only on page routes that can host Whiteboard, including Talk and /call pages.
  • Add the configured collaboration backend HTTP(S) origin and matching WS(S) origin to connect-src without wildcards.
  • Self-host Excalidraw fonts and fail the build if the CDN fallback rewrite stops matching.

Fixed issues

Fixes #1250
Fixes #1222
Fixes #1215
Fixes #1198

Signed-off-by: Hoang Pham <hoangmaths96@gmail.com>
@hweihwang hweihwang force-pushed the fix/csp-collab-backend-and-fonts branch from 62c54bb to a64a2a3 Compare July 7, 2026 14:23
@blizzz blizzz moved this to 🏗️ In progress in 📝 Productivity team Jul 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: 🏗️ In progress

2 participants