Merge pull request #423 from communitybridge/feat/cors-whitelist-fron…

…tend cors whitelist
communitybridge · Apr 10, 2024 · f1100db · f1100db
2 parents 78edba5 + 28c1533
commit f1100db
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/edge/security-headers.js b/edge/security-headers.js
@@ -40,7 +40,10 @@ function generateCSP(env, isDevServer) {
     'https://api-gw.staging.platform.linuxfoundation.org/',
     'https://api-gw.platform.linuxfoundation.org/',
     'https://api.lfcla.staging.platform.linuxfoundation.org/',
-    'https://api.lfcla.dev.platform.linuxfoundation.org/'
+    'https://api.lfcla.dev.platform.linuxfoundation.org/',
+    'https://easycla.dev.communitybridge.org/',
+    'https://easycla.lfx.linuxfoundation.org/',
+    'https://contributor.easycla.lfx.linuxfoundation.org/'
   ];
   let scriptSources = [SELF, UNSAFE_EVAL, UNSAFE_INLINE,
     'https://cdn.dev.platform.linuxfoundation.org/lfx-header-v2.js',