From e51123956f0fb8c66649099b6b2b290c88302bd0 Mon Sep 17 00:00:00 2001 From: Brandon Thomas Date: Sun, 6 Oct 2024 17:50:00 -0400 Subject: [PATCH] add render.storyteller.ai to preview server CORS --- workflows/preview_server/preview_server.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/workflows/preview_server/preview_server.py b/workflows/preview_server/preview_server.py index 8083586..2b3ebc4 100644 --- a/workflows/preview_server/preview_server.py +++ b/workflows/preview_server/preview_server.py @@ -19,7 +19,7 @@ import urllib import websockets # CORS header for which websites can import this content in a frame. -# This *technically* shouldn't be required, but the XHR requests are +# This *technically* shouldn't be required, but the XHR requests are # being made from a controlled frame. # # https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors @@ -27,6 +27,7 @@ import websockets # NB(bt,2024-03-30): The *.netlify.app is dangerous. CORS_WHITELIST_ORIGINS = [ "https://storyteller.ai", + "https://render.storyteller.ai", "https://studio.storyteller.ai", "https://studio-testing.studio.storyteller.ai", "https://studio-staging.studio.storyteller.ai",