From 758f6855849788292494eb5761fbeb35587787af Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 26 Jun 2026 17:11:01 +0000 Subject: [PATCH 1/2] Initial plan From 038c31d911e02f8210e009034bfbcfcc40b1f3a6 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 26 Jun 2026 17:12:22 +0000 Subject: [PATCH 2/2] Add graph.office.net to CSP connect-src for playground proxy --- .storybook/addons/codeEditorAddon/codeAddon.js | 2 +- .storybook/post-process-index-file.js | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.storybook/addons/codeEditorAddon/codeAddon.js b/.storybook/addons/codeEditorAddon/codeAddon.js index b19f2aefbc..885b4ad423 100644 --- a/.storybook/addons/codeEditorAddon/codeAddon.js +++ b/.storybook/addons/codeEditorAddon/codeAddon.js @@ -254,7 +254,7 @@ export const withCodeEditor = makeDecorator({ content="default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; - connect-src https://graph.microsoft.com https://graph.microsoft.us https://dod-graph.microsoft.us https://graph.microsoft.de https://microsoftgraph.chinacloudapi.cn https://canary.graph.microsoft.com https://login.microsoftonline.com https://cdn.graph.office.net 'self'; + connect-src https://graph.microsoft.com https://graph.microsoft.us https://dod-graph.microsoft.us https://graph.microsoft.de https://microsoftgraph.chinacloudapi.cn https://canary.graph.microsoft.com https://login.microsoftonline.com https://cdn.graph.office.net https://graph.office.net 'self'; img-src 'self' data: blob: https://*.microsoft.com https://*.microsoftonline.com https://*.sharepoint.com https://*.office.com https://*.office365.com https://*.windows.net; font-src 'self' https://static2.sharepointonline.com; frame-src https://login.microsoftonline.com 'self'; diff --git a/.storybook/post-process-index-file.js b/.storybook/post-process-index-file.js index 53e4df5783..dcfb467d24 100644 --- a/.storybook/post-process-index-file.js +++ b/.storybook/post-process-index-file.js @@ -60,7 +60,7 @@ function addCspTag(filePath) { ' ' )} 'self';style-src 'report-sample' 'unsafe-inline' ${styleHashes.join( ' ' - )} 'self';font-src static2.sharepointonline.com 'self';connect-src https://cdn.graph.office.net https://login.microsoftonline.com https://graph.microsoft.com https://mgt.dev 'self';img-src data: https: 'self';frame-src https://login.microsoftonline.com 'self';default-src 'self'; base-uri 'self'; upgrade-insecure-requests; form-action 'self';report-to https://csp.microsoft.com/report/MGT-Playground" + )} 'self';font-src static2.sharepointonline.com 'self';connect-src https://cdn.graph.office.net https://graph.office.net https://login.microsoftonline.com https://graph.microsoft.com https://mgt.dev 'self';img-src data: https: 'self';frame-src https://login.microsoftonline.com 'self';default-src 'self'; base-uri 'self'; upgrade-insecure-requests; form-action 'self';report-to https://csp.microsoft.com/report/MGT-Playground" />`; const updatedHtmlDocument = htmlDocument.replace( //,