Whitelisting Rules for Content Security Policy (CSP)

If you have a Content Security Policy (CSP) enabled in your app configuration, ensure that the following URLs are whitelisted:

script-src

  • *.velt.dev
  • *.api.velt.dev
  • *.firebaseio.com
  • *.googleapis.com
  • wss://*.firebaseio.com

connect-src

  • *.velt.dev
  • *.api.velt.dev
  • *.firebaseio.com
  • *.googleapis.com
  • wss://*.firebaseio.com

img-src

  • *.googleapis.com

media-src

  • storage.googleapis.com
  • firebasestorage.googleapis.com