From 60ebcfcca28febd13a806957137ab13c5a0b099e Mon Sep 17 00:00:00 2001
From: dannyweldon <danny.weldon@gmail.com>
Date: Wed, 8 Jan 2025 18:06:35 +1000
Subject: [PATCH] Add ws: and wss: schemes

These schemes are used by connect-src.

References:

https://content-security-policy.com/connect-src/ (Search for WebSocket)
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#scheme-source
https://developer.mozilla.org/en-US/docs/Web/URI/Schemes
---
 views/includes/csp-src.inc.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/views/includes/csp-src.inc.php b/views/includes/csp-src.inc.php
index e10481a..78a65e7 100644
--- a/views/includes/csp-src.inc.php
+++ b/views/includes/csp-src.inc.php
@@ -13,6 +13,8 @@
     'mediastream' => 'mediastream:',
     'blob' => 'blob:',
     'filesystem' => 'filesystem:',
+    'ws' => 'ws:',
+    'wss' => 'wss:',
 );
  
 foreach ($origins as $k => $origin)
@@ -84,4 +86,4 @@ class="http-header-value"
 		size="40"
 		placeholder="<?php echo $host_sources[0]; ?>"
 		value="<?php echo isset($csp_value[$item]['source']) ? esc_attr($csp_value[$item]['source']) : NULL; ?>"<?php echo $content_security_policy == 1 ? NULL : ' readonly'; ?>>
-</p>
\ No newline at end of file
+</p>