Skip to content

fix: Add GitLab Pages Auth site to CSP

Lukas 'ai-pi' Eipert requested to merge 1333-content-security-policy-csp-blocks-iframes-on-design-gitlab-com into main

Sometimes (when logged in?) or during pages deployments you will be redirected to projects.gitlab.io in order for some Pages Auth checks. Due to the CSP that process doesn't work out alright when embedded in an iframe. The fix is simple by adding projects.gitlab.io to our CSP policy.

Closes #1333 (closed)

Edited by Lukas 'ai-pi' Eipert

Merge request reports