Merge pull request #1030 from Fabio1988/patch-1

Fixes telegram login widget
WatWowMap · Aug 10, 2024 · 4b6b4ae · 4b6b4ae
2 parents 279b2c4 + adbaec6
commit 4b6b4ae
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/server/src/index.js b/server/src/index.js
@@ -78,7 +78,13 @@ const startServer = async () => {
       hidePoweredBy: true,
       contentSecurityPolicy: {
         directives: {
-          scriptSrc: ["'self'", 'https://cdn.jsdelivr.net'],
+          scriptSrc: [
+            "'self'",
+            'https://cdn.jsdelivr.net',
+            'https://telegram.org',
+            'https://static.cloudflareinsights.com',
+          ],
+          frameSrc: ["'self'", 'https://*.telegram.org'],
           workerSrc: ["'self'", 'blob:'],
         },
       },

diff --git a/src/components/auth/Telegram.jsx b/src/components/auth/Telegram.jsx
@@ -12,7 +12,7 @@ export function TelegramWidget({ botName, authUrl }) {
   React.useEffect(() => {
     if (ref.current) {
       const script = document.createElement('script')
-      script.src = 'https://telegram.org/js/telegram-widget.js?4'
+      script.src = 'https://telegram.org/js/telegram-widget.js?22'
       script.setAttribute('data-telegram-login', botName)
       script.setAttribute('data-auth-url', authUrl)
       script.setAttribute(