jared b39e3594d5 cinny: allow matrix.org media in CSP img-src ...

Federated matrix.org users load avatars/images from their own media endpoint
(matrix-client.matrix.org), which img-src still blocked — so every avatar
tripped a CSP violation. Add https://matrix.org + https://*.matrix.org to
img-src to match connect-src. (media-src already allows https: so video/audio
were fine.) Applied live to LXC 106 and synced here.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-30 14:49:08 -04:00

..

config.json

cinny: allow matrix.org logins on the Lotus client

2026-06-30 11:27:43 -04:00

lotus-build.sh

Fix NODE_OPTIONS heap size for Vite build (896MB → 6144MB)

2026-05-13 20:34:14 -04:00

nginx.conf

cinny: allow matrix.org media in CSP img-src

2026-06-30 14:49:08 -04:00

upstream-check.sh

Switch Lotus Cinny from nightly dev to stable-release fork workflow

2026-05-13 16:57:35 -04:00