@forge/csp

5.9.0-next.15.9.0-next.2
out/csp/csp-injection-service.js
~out/csp/csp-injection-service.jsModified
+2−2
Index: package/out/csp/csp-injection-service.js
===================================================================
--- package/out/csp/csp-injection-service.js
+++ package/out/csp/csp-injection-service.js
@@ -138,9 +138,10 @@
         getAtlassianHost('ATLASSIAN_MEDIA_GATEWAY_HOST', microsEnv, icOptions),
         getAtlassianHost('ATLASSIAN_EMOJIS_HOST', microsEnv, icOptions),
         getAtlassianHost('ATLASSIAN_TEAM_AVATAR_HOST', microsEnv, icOptions),
         getAtlassianHost('ATLASSIAN_TEAM_HEADER_HOST', microsEnv, icOptions),
-        ...getFOSHostDownload(microsEnv, icOptions)
+        ...getFOSHostDownload(microsEnv, icOptions),
+        ...getFOSCDNUrls(microsEnv, icOptions)
     ];
 };
 exports.getAtlassianImageHost = getAtlassianImageHost;
 exports.EXTERNAL_ALLOW_LISTED_IMAGES_HOSTS = ['https://secure.gravatar.com', 'https://images.unsplash.com'];
@@ -178,9 +179,8 @@
                 'blob:',
                 hostname,
                 ...exports.EXTERNAL_ALLOW_LISTED_IMAGES_HOSTS,
                 ...(0, exports.getAtlassianImageHost)(microsEnv, icOptions),
-                ...fosCDNUrls,
                 ...this.getExistingCSPDetails(types_1.ExternalCspType.IMG_SRC, existingCSPDetails)
             ]
                 .filter((a) => a)
                 .join(' ');