mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 19:01:54 +00:00
kevinveenbirkenbachandClaude Opus 5.5
45f96d6224
`https://public.api.bsky.app` in meta/csp.yml is a CSP origin, not a page. Its root answered HTTP 404 to CI runners at least twice on 2026-10-20 (runs 39417613648 and 39469069313) while answering 200 from other hosts, and each time test-external failed the whole workspace or PR test job. Mark the line `# nocheck: url`, as the neighbouring bsky origins already are, and place it directly above an already-marked entry: the suppression also covers the following line, so this order keeps `https://events.bsky.app` probed. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
24 lines
805 B
YAML
24 lines
805 B
YAML
---
|
|
flags:
|
|
script-src-elem:
|
|
unsafe-inline: true # nocheck: csp-unsafe Reason: historical, TODO: re-verify it is really required and does not open attack surface
|
|
whitelist:
|
|
connect-src:
|
|
- "{{ lookup('config', 'web-app-bluesky', 'domains.canonical.api') }}"
|
|
- https://plc.directory
|
|
- https://bsky.social
|
|
- https://api.bsky.app
|
|
- https://events.bsky.app
|
|
- https://public.api.bsky.app # nocheck: url Reason: CSP origin, not a page; its root intermittently answers HTTP 404 to CI runners
|
|
- https://*.workers.bsky.app # nocheck: url
|
|
- https://statsigapi.net # nocheck: url
|
|
- https://ip.bsky.app # nocheck: url
|
|
- https://video.bsky.app
|
|
- https://bsky.app
|
|
- wss://bsky.network
|
|
- wss://*.bsky.app
|
|
media-src:
|
|
- "blob:"
|
|
worker-src:
|
|
- "blob:"
|