From 8ce55ae9b944a45283123c30aa40d15c2f682753 Mon Sep 17 00:00:00 2001
From: Andrey Savihin <andrey.savihin@onlyoffice.com>
Date: Thu, 9 Nov 2023 15:35:20 +0300
Subject: [PATCH] fix Bug 64923 ( added frame-src, connect-src, media-src )

---
 config/appsettings.json | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/config/appsettings.json b/config/appsettings.json
index 78d87d805f..0246b7d7e7 100644
--- a/config/appsettings.json
+++ b/config/appsettings.json
@@ -419,20 +419,24 @@
       "style": ["'self'", "'unsafe-inline'"],
       "img": ["'self'", "data:", "blob:"],
       "frame": ["'self'"],
-	  "fonts": ["'self'", "data:"]
+      "fonts": ["'self'", "data:"],
+      "connect": ["'self'"],
+      "media": ["'self'"]
     },
     "zendesk": {
-      "def": ["*.zdassets.com", "*.zopim.com", "*.zendesk.com", "wss:"],
       "script": ["*.zdassets.com", "*.zopim.com", "'unsafe-eval'"],
-      "img": ["*.zopim.io"]
+      "img": ["*.zopim.io"],
+      "connect": ["*.zdassets.com", "*.zendesk.com", "*.zopim.com", "wss:"],
+      "media": ["*.zdassets.com"]
     },
     "firebase": {
       "script": ["*.googleapis.com"],
-      "def": ["*.googleapis.com"]
+      "frame": ["personal-teamlab-guru.firebaseapp.com"],
+      "connect": ["personal-teamlab-guru.firebaseapp.com", "*.googleapis.com"]
     },
     "oform": {
       "img": ["static-oforms.teamlab.info"],
-      "def": ["cmsoforms.teamlab.info"]
+      "connect": ["cmsoforms.teamlab.info", "oforms.teamlab.info"]
     }
   },
   "logocolors": [