ci

sreya · sreya · commit 4ba11f9b526d · 2024-07-16T18:24:47.000Z
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -1005,10 +1005,10 @@ jobs:
       - name: Serve
         working-directory: ./site
         run: |
-          pnpm dev &
+          pnpm vite preview &
           sleep 5
       - name: Run Meticulous tests
         uses: alwaysmeticulous/report-diffs-action/cloud-compute@v1
         with:
           api-token: ${{ secrets.METICULOUS_API_TOKEN }}
-          app-url: "http://127.0.0.1:8080/"
+          app-url: "http://127.0.0.1:4173/"
diff --git a/coderd/httpmw/csp.go b/coderd/httpmw/csp.go
@@ -56,10 +56,10 @@ func CSPHeaders(telemetry bool, websocketHosts func() []string) func(next http.H
 			cspSrcs := cspDirectives{
 				// All omitted fetch csp srcs default to this.
 				cspDirectiveDefaultSrc: {"'self'"},
-				cspDirectiveConnectSrc: {"'self'"},
+				cspDirectiveConnectSrc: {"'self' https://cognito-identity.us-west-2.amazonaws.com https://user-events-v3.s3-accelerate.amazonaws.com *.sentry.io"},
 				cspDirectiveChildSrc:   {"'self'"},
 				// https://github.com/suren-atoyan/monaco-react/issues/168
-				cspDirectiveScriptSrc: {"'self'"},
+				cspDirectiveScriptSrc: {"'self' https://snippet.meticulous.ai https://browser.sentry-cdn.com "},
 				cspDirectiveStyleSrc:  {"'self' 'unsafe-inline'"},
 				// data: is used by monaco editor on FE for Syntax Highlight
 				cspDirectiveFontSrc:   {"'self' data:"},
