Allow any connect-src in CSP

Managing these for all the integrations seems like a lot of effort

1 files changed, 1 insertions, 1 deletions

diff --git a/app.js b/app.js
index 8664707d..c382cc35 100644
--- a/app.js
+++ b/app.js
@@ -145,7 +145,7 @@ if (config.csp.enable) {
     fontSrc: ['\'self\'', 'https://public.slidesharecdn.com'],
     objectSrc: ['*'], // Chrome PDF viewer treats PDFs as objects :/
     childSrc: ['*'],
-    connectSrc: ['\'self\'', 'https://links.services.disqus.com', 'wss://realtime.services.disqus.com']
+    connectSrc: ['*']
   };
   var cdnDirectives = {
     scriptSrc: ['https://cdnjs.cloudflare.com', 'https://cdn.mathjax.org'],