Get CSP_ENV_SITES from environment variable

OpenClinica · Dec 12, 2023 · 242938f · 242938f
1 parent 3e14eac
commit 242938f
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/kobo/settings/base.py b/kobo/settings/base.py
@@ -794,9 +794,10 @@ def dj_stripe_request_callback_method():
     'https://*.staging.openclinica.io',
     'https://*.openclinica-dev-eks.io',
 ]
-CSP_FRAME_ANCESTORS = CSP_OC_SITES
-CSP_CONNECT_SRC = CSP_CONNECT_SRC + CSP_OC_SITES
-CSP_FRAME_SRC = CSP_FRAME_SRC + CSP_OC_SITES
+CSP_ENV_SITES = env.url('CSP_ENV_SITES', [])
+CSP_FRAME_ANCESTORS = CSP_OC_SITES + CSP_ENV_SITES
+CSP_CONNECT_SRC = CSP_CONNECT_SRC + CSP_OC_SITES + CSP_ENV_SITES
+CSP_FRAME_SRC = CSP_FRAME_SRC + CSP_OC_SITES + CSP_ENV_SITES
 
 csp_report_uri = env.url('CSP_REPORT_URI', None)
 if csp_report_uri:  # Let environ validate uri, but set as string