From 0c2a63dcd323226d8efeb2b30f35fe6d53ea9442 Mon Sep 17 00:00:00 2001
From: Lucas Santana <lucasrcsantana@gmail.com>
Date: Sat, 18 Jan 2025 17:42:58 -0300
Subject: [PATCH] fix: corrigindo CORS

---
 netlify.toml                                    | 2 +-
 supabase/functions/generate-story/index.ts      | 1 +
 supabase/functions/generate-word-audio/index.ts | 1 +
 supabase/functions/process-audio/index.ts       | 1 +
 4 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/netlify.toml b/netlify.toml
index fa73716..fc30beb 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -29,7 +29,7 @@
       script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.rudderlabs.com https://*.cloudfront.net https://www.googletagmanager.com https://*.sentry.io;
       connect-src 'self' https://*.rudderlabs.com https://*.ingest.sentry.io https://*.supabase.co https://www.google-analytics.com https://*.dataplane.rudderstack.com https://*.bugsnag.com/ https://*.ingest.us.sentry.io/ https://*.sentry.io/;
       style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;
-      img-src 'self' data: https: blob:;
+      img-src 'self' data: https: blob: https://*.supabase.co;
       font-src 'self' data: https://fonts.gstatic.com;
       frame-src 'self' https://www.googletagmanager.com;
       worker-src 'self' blob:;
diff --git a/supabase/functions/generate-story/index.ts b/supabase/functions/generate-story/index.ts
index f0fea1d..01630cc 100644
--- a/supabase/functions/generate-story/index.ts
+++ b/supabase/functions/generate-story/index.ts
@@ -46,6 +46,7 @@ interface StoryResponse {
 serve(async (req) => {
   const origin = req.headers.get('origin') || '';
   const corsHeaders = {
+    'Cross-Origin-Resource-Policy': 'cross-origin',
     'Access-Control-Allow-Origin': ALLOWED_ORIGINS.includes(origin) ? origin : ALLOWED_ORIGINS[0],
     'Access-Control-Allow-Methods': 'POST, OPTIONS',
     'Access-Control-Allow-Headers': 'authorization, x-client-info, apikey, content-type',
diff --git a/supabase/functions/generate-word-audio/index.ts b/supabase/functions/generate-word-audio/index.ts
index 6418fc2..0e0ef7d 100644
--- a/supabase/functions/generate-word-audio/index.ts
+++ b/supabase/functions/generate-word-audio/index.ts
@@ -4,6 +4,7 @@ import { createClient } from "https://esm.sh/@supabase/supabase-js@2";
 const corsHeaders = {
   'Access-Control-Allow-Origin': '*',
   'Access-Control-Allow-Headers': 'authorization, x-client-info, apikey, content-type',
+  'Cross-Origin-Resource-Policy': 'cross-origin'
 };
 
 serve(async (req) => {
diff --git a/supabase/functions/process-audio/index.ts b/supabase/functions/process-audio/index.ts
index d06f1d7..752f7f4 100644
--- a/supabase/functions/process-audio/index.ts
+++ b/supabase/functions/process-audio/index.ts
@@ -7,6 +7,7 @@ import { createLogger } from './logger.ts'
 const corsHeaders = {
   'Access-Control-Allow-Origin': '*',
   'Access-Control-Allow-Headers': 'authorization, x-client-info, apikey, content-type',
+  'Cross-Origin-Resource-Policy': 'cross-origin'
 }
 
 interface AudioRecord {