feat(csp): automatically add awsapps.com for Amazon SAML

Fixes #13712
WeblateOrg · Feb 5, 2025 · 096cfa5 · 096cfa5
1 parent 39fa13b
commit 096cfa5
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/weblate/middleware.py b/weblate/middleware.py
@@ -449,7 +449,9 @@ def build_csp_auth(self) -> None:
                     ]
 
                 for url in urls:
-                    self.add_csp_host(url, "form-action")
+                    domain = self.add_csp_host(url, "form-action")
+                    if domain.endswith(".amazonaws.com"):
+                        self.directives["form-action"].add("*.awsapps.com")
 
 
 class SecurityMiddleware: