address comments

Author: jhadvig

pkg/utils/utils.go

@@ -62,12 +62,12 @@ func BuildCSPDirectives(k8sMode string, pluginsCSP serverconfig.MultiKeyValue, i
 	// default sources. Image source, font source, and style source only use 'self' and
 	directives := map[string][]string{
 		baseURI:        {self},
-		defaultSrc:     {self, consoleDot},
+		defaultSrc:     {self},
 		imgSrc:         {self},
 		fontSrc:        {self},
 		scriptSrc:      {self, consoleDot},
 		styleSrc:       {self},
-		connectSrc:     {self},
+		connectSrc:     {self, consoleDot},
 		frameSrc:       {none},
 		frameAncestors: {none},
 	}

pkg/utils/utils_test.go

@@ -9,18 +9,18 @@ import (
 
 const (
 	onClusterBaseUri        = "base-uri 'self'"
-	onClusterDefaultSrc     = "default-src 'self' console.redhat.com"
+	onClusterDefaultSrc     = "default-src 'self'"
 	onClusterImgSrc         = "img-src 'self'"
 	onClusterFontSrc        = "font-src 'self'"
 	onClusterScriptSrc      = "script-src 'self' console.redhat.com"
 	onClusterStyleSrc       = "style-src 'self'"
 	offClusterBaseUri       = "base-uri 'self' http://localhost:8080 ws://localhost:8080"
-	offClusterDefaultSrc    = "default-src 'self' console.redhat.com http://localhost:8080 ws://localhost:8080"
+	offClusterDefaultSrc    = "default-src 'self' http://localhost:8080 ws://localhost:8080"
 	offClusterImgSrc        = "img-src 'self' http://localhost:8080"
 	offClusterFontSrc       = "font-src 'self' http://localhost:8080"
 	offClusterScriptSrc     = "script-src 'self' console.redhat.com http://localhost:8080 ws://localhost:8080"
 	offClusterStyleSrc      = "style-src 'self' http://localhost:8080"
-	connectSrcDirective     = "connect-src 'self'"
+	connectSrcDirective     = "connect-src 'self' console.redhat.com"
 	frameSrcDirective       = "frame-src 'none'"
 	frameAncestorsDirective = "frame-ancestors 'none'"
 )