LotusGuild/matrix

fix(cinny-web): CSP for mozilla.org discovery and TikTok oEmbed; featured communities (#18, #20, #21) #32

Merged

jared merged 3 commits from fix/web-config-csp into main

2026-10-18 19:45:53 -04:00

Author	SHA1	Message	Date
Lotus CIandClaude Opus 5.5	61ed3c64e3	feat(cinny-web): featured communities on Explore, matching the desktop app (#20 ) Lint / JS (eslint) (push) Successful in 11s Details Lint / No secrets in webhook configs (push) Successful in 6s Details Lint / Landing page is rendered (matrix (push) Successful in 6s Details Lint / Python (ruff) (push) Successful in 16s Details Lint / Python deps (pip-audit) (push) Successful in 1m9s Details Lint / Secret scan (gitleaks) (push) Successful in 6s Details Lint / Shell (shellcheck) (pull_request) Successful in 15s Details Lint / JS (eslint) (pull_request) Successful in 14s Details Lint / No secrets in webhook configs (pull_request) Successful in 9s Details Lint / Landing page is rendered (matrix (pull_request) Successful in 10s Details Lint / Python (ruff) (pull_request) Successful in 11s Details Lint / Python deps (pip-audit) (pull_request) Successful in 1m7s Details Lint / Secret scan (gitleaks) (pull_request) Successful in 8s Details Lint / Shell (shellcheck) (push) Successful in 11s Details chat.lotusguild.org's config.json has never had featuredCommunities, so Explore → Featured was empty on the web while the desktop app showed the Lotus Guild space, Homelab, Jellyfin and matrixrooms.info. Add the same set (decided 2026-10-04). Fixes #20 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-18 02:37:16 -04:00
Lotus CIandClaude Opus 5.5	be0ff3b854	fix(cinny-web): allow the TikTok oEmbed lookup in connect-src (#18 ) TikTok short links (vm.tiktok.com/…, tiktok.com/t/…) resolve their video id via https://www.tiktok.com/oembed, which the CSP refused, so their cards always failed on the web. The player itself was already allowed (frame-src https:). Fixes #18 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-18 02:37:16 -04:00
Lotus CIandClaude Opus 5.5	93078858c1	fix(cinny-web): allow www.mozilla.org in connect-src so mozilla.org login can discover its homeserver (#21 ) mozilla.org/.well-known/matrix/client 301s to www.mozilla.org, which the CSP refused, so choosing mozilla.org always said "Failed to connect". Fixes #21 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-18 02:37:16 -04:00