Files
openproject/modules/documents/app/services
Kabiru Mwenja 878906ded4 Add URL scheme validation for hocuspocus server URL
Adds contract-level validation to ensure the collaborative editing
hocuspocus URL only accepts WebSocket protocols (ws://, wss://).
Previously, misconfiguration with https:// would silently cause
Content Security Policy errors at runtime.

https://community.openproject.org/wp/71888
2026-02-23 12:17:04 +03:00
..