From e8deec13a26b2c29199352280c90a7cb294372d5 Mon Sep 17 00:00:00 2001 From: Peter Steinberger Date: Wed, 6 May 2026 22:16:00 +0100 Subject: [PATCH] fix: allow docs host auth callback form posts --- vercel.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vercel.json b/vercel.json index a62f47c3..43364658 100644 --- a/vercel.json +++ b/vercel.json @@ -5,7 +5,7 @@ "headers": [ { "key": "Content-Security-Policy", - "value": "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self' https://documentation.openclaw.ai http://localhost:4173 http://127.0.0.1:4173; upgrade-insecure-requests" + "value": "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self' https://documentation.openclaw.ai https://docs.openclaw.ai http://localhost:4173 http://127.0.0.1:4173; upgrade-insecure-requests" }, { "key": "X-Content-Type-Options", "value": "nosniff" }, { "key": "X-Frame-Options", "value": "DENY" },