deepkoluguri
/
institutional-trader
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: update CSP for Cloudflare and set CORS_ORIGIN to fix 500 errors
Build Institutional Trader / build-and-deploy (push) Successful in 2m8s Details

This commit is contained in:
Deep Koluguri 2026-06-22 19:40:24 -04:00
parent 76c24aaec1
commit cd83c18555
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
backend/src/middleware/security.js
View File

@ -9,7 +9,7 @@ export const setupSecurity = (app) => {
directives: { directives: {
defaultSrc: ["'self'"], defaultSrc: ["'self'"],
styleSrc: ["'self'", "'unsafe-inline'"], styleSrc: ["'self'", "'unsafe-inline'"],
scriptSrc: ["'self'"], scriptSrc: ["'self'", "https://static.cloudflareinsights.com", "'unsafe-inline'"],
imgSrc: ["'self'", 'data:', 'https:'], imgSrc: ["'self'", 'data:', 'https:'],
}, },
}, },

2
k8s/app.yaml
View File

@ -22,6 +22,8 @@ spec:
env: env:
- name: NODE_ENV - name: NODE_ENV
value: "production" value: "production"
- name: CORS_ORIGIN
value: "https://market.applaude.net"
- name: USE_PYTHON_SERVICE - name: USE_PYTHON_SERVICE
value: "false" value: "false"
- name: DATABASE_URL - name: DATABASE_URL