mirror of
https://github.com/opf/openproject.git
synced 2026-06-14 03:30:14 +00:00
878906ded4
Adds contract-level validation to ensure the collaborative editing hocuspocus URL only accepts WebSocket protocols (ws://, wss://). Previously, misconfiguration with https:// would silently cause Content Security Policy errors at runtime. https://community.openproject.org/wp/71888