Files
triggerdotdev--trigger.dev/apps/webapp/app/utils
Katia Bulatova 48d0d4a707 fix(webapp): drop the img-src wildcard host for a validated origin allowlist
Replaces https://*.googleusercontent.com (a host with public write access)
with CSP_IMG_SRC_ALLOWLIST: exact origins only, https outside development,
deduplicated, bad entries warned about instead of failing the boot.
2026-08-06 10:27:58 +00:00
..
2024-11-19 13:14:25 +00:00
2026-06-26 09:01:37 +01:00
2026-07-08 15:11:40 +02:00
2026-03-05 11:05:45 +00:00
2025-03-05 14:40:14 +00:00
2026-03-23 16:07:30 +01:00