Remove Clerk-internal host from default CSP directive
Removed https://images.clerkstage.dev from the default connect-src Content Security Policy directive as it is an internal Clerk storage host not used by applications. Organization logos continue to be served from https://img.clerk.com.
Patch Changes
-
Remove
https://images.clerkstage.devfrom the defaultconnect-srcContent Security Policy directive. It is a Clerk-internal storage host that no application connects to. Organization logos are served fromhttps://img.clerk.com, which stays in the default. (#9898) by @Grundlefleck -
Updated dependencies [
2302140,2654caa,dee649c]:- @clerk/backend@3.23.0
- @clerk/shared@4.39.0
- @clerk/react@6.17.6
Source: original entry ↗
More from Clerk
Follow Clerk to get its new changes in your feed and email digest.
@clerk/expo-native-components package introduced
A new @clerk/expo-native-components package is now required for native components (AuthView, UserButton, UserProfileView). Install it before deploying over-the-air updates as errors occur at runtime; import native components from @clerk/expo/native-components and deprecate the old @clerk/expo/native import path.
@clerk/expo-native-components 0.1.0
Introduces @clerk/expo-native-components, a new required package for native components (AuthView, UserButton, UserProfileView). Import native components from @clerk/expo/native-components instead of the deprecated @clerk/expo/native, and install the new package before shipping over-the-air updates to avoid runtime errors.
@clerk/ui@1.40.1
Release of @clerk/ui version 1.40.1 with updates and improvements to the UI component library.