From 9a0a6f8c3b40ea808e3d442199b1c71ecf2eab65 Mon Sep 17 00:00:00 2001 From: Maurice Date: Fri, 4 Sep 2026 19:54:07 +0200 Subject: [PATCH] fix(settings): the routing endpoint belongs to the operator routing_base_url arrived on this branch and was assigned to neither managed set, which MANAGED-KEYS-001 exists to catch. It is locked, alongside the other infrastructure endpoints: the host it names is folded into the CSP once at boot (routingCspOrigins), so a customer who repoints it lands in a policy that does not know their router and the browser blocks the requests with nothing to catch. MANAGED-KEYS-005 pins the list verbatim and is updated with it. --- server/src/nest/common/managed.ts | 1 + server/tests/unit/nest/managed-keys.test.ts | 1 + 2 files changed, 2 insertions(+) diff --git a/server/src/nest/common/managed.ts b/server/src/nest/common/managed.ts index e1c265376..bfd41c87b 100644 --- a/server/src/nest/common/managed.ts +++ b/server/src/nest/common/managed.ts @@ -88,6 +88,7 @@ export const MANAGED_LOCKED_SETTING_KEYS = [ 'oidc_login', 'oidc_registration', 'openweather_api_key', + 'routing_base_url', 'smtp_from', 'smtp_host', 'smtp_pass', diff --git a/server/tests/unit/nest/managed-keys.test.ts b/server/tests/unit/nest/managed-keys.test.ts index 8b4bb0986..a8b2391b8 100644 --- a/server/tests/unit/nest/managed-keys.test.ts +++ b/server/tests/unit/nest/managed-keys.test.ts @@ -62,6 +62,7 @@ describe('managed key assignment', () => { 'oidc_login', 'oidc_registration', 'openweather_api_key', + 'routing_base_url', 'smtp_from', 'smtp_host', 'smtp_pass',