add custom javascript to cloudron dashboard

[jdaviescoates]

@nennogabriel said in add custom javascript to cloudron app.:

If was possible to put a script tag to make my chatwood working inside my.domain.com would be nice.

Nice idea. I guess other code snippets could be used to, e.g. either for other chat support tools, and/ or perhaps analytics stuff too.

[BrutalBirdie]

@nennogabriel @staff this might be a good pick.

Just for clarification, you are talking about deploying custom java script to cloudron it self and not other apps, right?
Since your title states add custom javascript to cloudron app which might be a bit misleading.

[micmc]

@BrutalBirdie I agree this is one of a good idea and suitable as well. And I believe he meant to add the support script to the cloudron box indeed. At least this is what is the good idea.

[nennogabriel]

@BrutalBirdie yes. it could be a little box in "brand" menu. just to add a simple javacript to all pages, like footer.

[nebulon]

Generally just injecting javascript into the dashboard is doable, however if we would add this feature, still adding stuff like a chatwoot chat would not work unless we also add a way to configure the CSP headers sent for the dashboard. Currently those are tightly locked to domains we use and those are fixed. So without that, I am not sure how useful adding snippets would be and adding a way to configure the CSP headers is a lot more work, as we have to regenerate the nginx configs accordingly.

[robi]

@nebulon these would not be for any cloudron.io domains, but for user my.server.tld domains.

Chatwoot configs don't require CSP from what I can tell.

[luanc202]

that would be nice even if it's not for a chatwoot or any other chat widget, analytics and other scripts can make good use of that.

hope we get that feature soon.

[nebulon]

@robi said in add custom javascript to cloudron dashboard:

Chatwoot configs don't require CSP from what I can tell.

The dashboard being the main site will determine through CSP headers what can be done, and currently either loading or iframing pages on other domains is not allowed, nor is doing REST calls of sorts against other domains. So I am not sure how chatwoot would workaround those.

[robi]

@nebulon it would remain in the server.tld domain, not others. Hence chatwoot.server.tld would just be a subdomain of the dashboard as all apps are (on that domain),

[nennogabriel]

@nebulon I understand. Be secure is a lot more important than some customization.

I will use the branding to show an external link to my website where it has the chat support. thank you

So, if possible, would be nice to have a block message on top of the webpage os my.domain.com like the footer, in markdown too. So I can write a simple and clear message to all costumers when they access the platform.

[jdaviescoates]

@nennogabriel that's another nice idea!