Skip to main content

Add Amazon wildcard to whitelisted CSP

Add *.s3.amazonaws.com to the default CSP whitelist to allow loading assets from all S3 buckets.

1 comment

Log in to comment and vote

Comments1

  • Salmon Yogurt

    •

    Oct 8, 2025

    Or just make this CSP policy configurable.

    It would be also nice to embed stuff from companys own systems like system1.company.com.