Wildcard support for script and styles (content security and egress controls)

Forge Forge UI Kit and Custom UI
,
1

I was trying to access the external scripts and styles inside the forge app. Such as

In manifest.yml
permissions:
  external:
    fetch:
      backend:
        - 'https://gist.github.com'
        - 'https://github.githubassets.com'
    scripts:
      - 'https://gist.github.com/f50af6f904b38bc1493cd2e1ab6c231a.js'
    styles:
      - 'https://github.githubassets.com/assets/gist-embed-ef56e5d9440564956828ba4595d80453.css'

It is working fine If we provide the full path of script/style. But it is not working if we pass wildcards(example https://gist.github.com/*). We have a requirement to allow the script/styles from specific domains.
Could you please help me how can I access.

2

I got it worked by just adding domains

    scripts:
      - 'https://gist.github.com'
    styles:
      - 'https://github.githubassets.com'

Please update this use case in your documentation.

1 Like