add render.storyteller.ai to preview server CORS

This commit is contained in:
Brandon Thomas
2024-10-06 17:50:00 -04:00
parent 183817f064
commit e51123956f
+2 -1
View File
@@ -19,7 +19,7 @@ import urllib
import websockets
# CORS header for which websites can import this content in a frame.
# This *technically* shouldn't be required, but the XHR requests are
# This *technically* shouldn't be required, but the XHR requests are
# being made from a controlled frame.
#
# https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors
@@ -27,6 +27,7 @@ import websockets
# NB(bt,2024-03-30): The *.netlify.app is dangerous.
CORS_WHITELIST_ORIGINS = [
"https://storyteller.ai",
"https://render.storyteller.ai",
"https://studio.storyteller.ai",
"https://studio-testing.studio.storyteller.ai",
"https://studio-staging.studio.storyteller.ai",