Add SRI to script tags where applicable (#2153)

* Add SRI to script tags

* Update app/views/articles/_hiring_form.html.erb

Good point :)

Co-Authored-By: rhymes <rhymesete@gmail.com>
This commit is contained in:
rhymes 2019-03-22 19:14:59 +01:00 committed by Ben Halpern
parent e96bf2e329
commit b789e5d78d
10 changed files with 223 additions and 205 deletions

View file

@ -1,4 +1,5 @@
<script src="https://cdn.jsdelivr.net/npm/places.js@1.4.15"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/places.js/1.4.15/places.min.js"
integrity="sha256-omJTH9gP+kg7eWch+tko/pH2dPinDVAu6uANm5AJeFI=" crossorigin="anonymous"></script>
<div id="hiring-form" class="hiring-form">
<%= f.fields_for @article.job_opportunity || JobOpportunity.new do |jo| %>
<h2>Where is your office located?</h2>

View file

@ -1,8 +1,13 @@
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/codemirror.min.js"></script>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/codemirror.min.css">
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/mode/css/css.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/mode/javascript/javascript.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/mode/htmlmixed/htmlmixed.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/codemirror.min.js"
integrity="sha256-UQey9E6ZZXhvoLNXvVmU5lRSbOcCZe707EBLJTtMwSc=" crossorigin="anonymous"></script>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/codemirror.min.css"
integrity="sha256-GGAcbnLrt4/AHq5cP2+2UWetYcNsQNjNMqSRStBoPLQ=" crossorigin="anonymous" />
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/mode/css/css.min.js"
integrity="sha256-FM1AMdIH6Zrnz+JGuB5uTB6jxAJ8/XvGvq4HJM0YtDQ=" crossorigin="anonymous"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/mode/javascript/javascript.min.js"
integrity="sha256-Zci/fLjT1ALmFze3qSOXnHkYOOpyj5WUHM/Ioy+Bpyo=" crossorigin="anonymous"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/mode/htmlmixed/htmlmixed.min.js"
integrity="sha256-fYwhT0v38tXMnxU+JibUW1drchatADDwdPWvOuxI/yg=" crossorigin="anonymous"></script>
<script>
setTimeout(function () {

View file

@ -1,4 +1,5 @@
<script src="//ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.2.1/jquery.min.js"
integrity="sha256-hwg4gsxgFZhOsEEamdOYGBf13FyQuiTwlAQgxVSNgt4=" crossorigin="anonymous"></script>
<script src="//d79i1fxsrar4t.cloudfront.net/jquery.liveaddress/3.4/jquery.liveaddress.min.js"></script>
<script>
var liveaddress = jQuery.LiveAddress({
@ -74,190 +75,190 @@
options_for_select(
[["United States", "US"],
["-----", ""],
["Afghanistan", "AF"],
%w[Afghanistan AF],
["Åland Islands", "AX"],
["Albania", "AL"],
["Algeria", "DZ"],
%w[Albania AL],
%w[Algeria DZ],
["American Samoa", "AS"],
["Andorra", "AD"],
["Angola", "AO"],
["Anguilla", "AI"],
["Antarctica", "AQ"],
%w[Andorra AD],
%w[Angola AO],
%w[Anguilla AI],
%w[Antarctica AQ],
["Antigua and Barbuda", "AG"],
["Argentina", "AR"],
["Armenia", "AM"],
["Aruba", "AW"],
["Australia", "AU"],
["Austria", "AT"],
["Azerbaijan", "AZ"],
["Bahamas", "BS"],
["Bahrain", "BH"],
["Bangladesh", "BD"],
["Barbados", "BB"],
["Belarus", "BY"],
["Belgium", "BE"],
["Belize", "BZ"],
["Benin", "BJ"],
["Bermuda", "BM"],
["Bhutan", "BT"],
["Bolivia", "BO"],
["Bonaire", "BQ"],
%w[Argentina AR],
%w[Armenia AM],
%w[Aruba AW],
%w[Australia AU],
%w[Austria AT],
%w[Azerbaijan AZ],
%w[Bahamas BS],
%w[Bahrain BH],
%w[Bangladesh BD],
%w[Barbados BB],
%w[Belarus BY],
%w[Belgium BE],
%w[Belize BZ],
%w[Benin BJ],
%w[Bermuda BM],
%w[Bhutan BT],
%w[Bolivia BO],
%w[Bonaire BQ],
["Bosnia and Herzegovina", "BA"],
["Botswana", "BW"],
%w[Botswana BW],
["Bouvet Island", "BV"],
["Brazil", "BR"],
%w[Brazil BR],
["BIO Territory", "IO"],
["Brunei Darussalam", "BN"],
["Bulgaria", "BG"],
%w[Bulgaria BG],
["Burkina Faso", "BF"],
["Burundi", "BI"],
["Cambodia", "KH"],
["Cameroon", "CM"],
["Canada", "CA"],
%w[Burundi BI],
%w[Cambodia KH],
%w[Cameroon CM],
%w[Canada CA],
["Cape Verde", "CV"],
["Cayman Islands", "KY"],
["Central African Republic", "CF"],
["Chad", "TD"],
["Chile", "CL"],
["China", "CN"],
%w[Chad TD],
%w[Chile CL],
%w[China CN],
["Christmas Island", "CX"],
["Cocos (Keeling) Islands", "CC"],
["Colombia", "CO"],
["Comoros", "KM"],
["Congo", "CG"],
["Congo", "CD"],
%w[Colombia CO],
%w[Comoros KM],
%w[Congo CG],
%w[Congo CD],
["Cook Islands", "CK"],
["Costa Rica", "CR"],
["Côte d'Ivoire", "CI"],
["Croatia", "HR"],
["Cuba", "CU"],
["Curaçao", "CW"],
["Cyprus", "CY"],
%w[Croatia HR],
%w[Cuba CU],
%w[Curaçao CW],
%w[Cyprus CY],
["Czech Republic", "CZ"],
["Denmark", "DK"],
["Djibouti", "DJ"],
["Dominica", "DM"],
%w[Denmark DK],
%w[Djibouti DJ],
%w[Dominica DM],
["Dominican Republic", "DO"],
["Ecuador", "EC"],
["Egypt", "EG"],
%w[Ecuador EC],
%w[Egypt EG],
["El Salvador", "SV"],
["Equatorial Guinea", "GQ"],
["Eritrea", "ER"],
["Estonia", "EE"],
["Ethiopia", "ET"],
%w[Eritrea ER],
%w[Estonia EE],
%w[Ethiopia ET],
["Falkland Islands", "FK"],
["Faroe Islands", "FO"],
["Fiji", "FJ"],
["Finland", "FI"],
["France", "FR"],
%w[Fiji FJ],
%w[Finland FI],
%w[France FR],
["French Guiana", "GF"],
["French Polynesia", "PF"],
["French S Territories", "TF"],
["Gabon", "GA"],
["Gambia", "GM"],
["Georgia", "GE"],
["Germany", "DE"],
["Ghana", "GH"],
["Gibraltar", "GI"],
["Greece", "GR"],
["Greenland", "GL"],
["Grenada", "GD"],
["Guadeloupe", "GP"],
["Guam", "GU"],
["Guatemala", "GT"],
["Guernsey", "GG"],
["Guinea", "GN"],
%w[Gabon GA],
%w[Gambia GM],
%w[Georgia GE],
%w[Germany DE],
%w[Ghana GH],
%w[Gibraltar GI],
%w[Greece GR],
%w[Greenland GL],
%w[Grenada GD],
%w[Guadeloupe GP],
%w[Guam GU],
%w[Guatemala GT],
%w[Guernsey GG],
%w[Guinea GN],
["Guinea-Bissau", "GW"],
["Guyana", "GY"],
["Haiti", "HT"],
%w[Guyana GY],
%w[Haiti HT],
["Heard McDonald Islands", "HM"],
["Holy See", "VA"],
["Honduras", "HN"],
%w[Honduras HN],
["Hong Kong", "HK"],
["Hungary", "HU"],
["Iceland", "IS"],
["India", "IN"],
["Indonesia", "ID"],
["Iran", "IR"],
["Iraq", "IQ"],
["Ireland", "IE"],
%w[Hungary HU],
%w[Iceland IS],
%w[India IN],
%w[Indonesia ID],
%w[Iran IR],
%w[Iraq IQ],
%w[Ireland IE],
["Isle of Man", "IM"],
["Israel", "IL"],
["Italy", "IT"],
["Jamaica", "JM"],
["Japan", "JP"],
["Jersey", "JE"],
["Jordan", "JO"],
["Kazakhstan", "KZ"],
["Kenya", "KE"],
["Kiribati", "KI"],
%w[Israel IL],
%w[Italy IT],
%w[Jamaica JM],
%w[Japan JP],
%w[Jersey JE],
%w[Jordan JO],
%w[Kazakhstan KZ],
%w[Kenya KE],
%w[Kiribati KI],
["Korea, People's Republic", "KP"],
["Korea, Republic of", "KR"],
["Kuwait", "KW"],
["Kyrgyzstan", "KG"],
["Lao", "LA"],
["Latvia", "LV"],
["Lebanon", "LB"],
["Lesotho", "LS"],
["Liberia", "LR"],
["Libya", "LY"],
["Liechtenstein", "LI"],
["Lithuania", "LT"],
["Luxembourg", "LU"],
["Macao", "MO"],
["Macedonia", "MK"],
["Madagascar", "MG"],
["Malawi", "MW"],
["Malaysia", "MY"],
["Maldives", "MV"],
["Mali", "ML"],
["Malta", "MT"],
%w[Kuwait KW],
%w[Kyrgyzstan KG],
%w[Lao LA],
%w[Latvia LV],
%w[Lebanon LB],
%w[Lesotho LS],
%w[Liberia LR],
%w[Libya LY],
%w[Liechtenstein LI],
%w[Lithuania LT],
%w[Luxembourg LU],
%w[Macao MO],
%w[Macedonia MK],
%w[Madagascar MG],
%w[Malawi MW],
%w[Malaysia MY],
%w[Maldives MV],
%w[Mali ML],
%w[Malta MT],
["Marshall Islands", "MH"],
["Martinique", "MQ"],
["Mauritania", "MR"],
["Mauritius", "MU"],
["Mayotte", "YT"],
["Mexico", "MX"],
["Micronesia", "FM"],
%w[Martinique MQ],
%w[Mauritania MR],
%w[Mauritius MU],
%w[Mayotte YT],
%w[Mexico MX],
%w[Micronesia FM],
["Moldova, Republic of", "MD"],
["Monaco", "MC"],
["Mongolia", "MN"],
["Montenegro", "ME"],
["Montserrat", "MS"],
["Morocco", "MA"],
["Mozambique", "MZ"],
["Myanmar", "MM"],
["Namibia", "NA"],
["Nauru", "NR"],
["Nepal", "NP"],
["Netherlands", "NL"],
%w[Monaco MC],
%w[Mongolia MN],
%w[Montenegro ME],
%w[Montserrat MS],
%w[Morocco MA],
%w[Mozambique MZ],
%w[Myanmar MM],
%w[Namibia NA],
%w[Nauru NR],
%w[Nepal NP],
%w[Netherlands NL],
["New Caledonia", "NC"],
["New Zealand", "NZ"],
["Nicaragua", "NI"],
["Niger", "NE"],
["Nigeria", "NG"],
["Niue", "NU"],
%w[Nicaragua NI],
%w[Niger NE],
%w[Nigeria NG],
%w[Niue NU],
["Norfolk Island", "NF"],
["Northern Mariana Islands", "MP"],
["Norway", "NO"],
["Oman", "OM"],
["Pakistan", "PK"],
["Palau", "PW"],
%w[Norway NO],
%w[Oman OM],
%w[Pakistan PK],
%w[Palau PW],
["Palestinian Territory", "PS"],
["Panama", "PA"],
%w[Panama PA],
["Papua New Guinea", "PG"],
["Paraguay", "PY"],
["Peru", "PE"],
["Philippines", "PH"],
["Pitcairn", "PN"],
["Poland", "PL"],
["Portugal", "PT"],
%w[Paraguay PY],
%w[Peru PE],
%w[Philippines PH],
%w[Pitcairn PN],
%w[Poland PL],
%w[Portugal PT],
["Puerto Rico", "PR"],
["Qatar", "QA"],
["Réunion", "RE"],
["Romania", "RO"],
%w[Qatar QA],
%w[Réunion RE],
%w[Romania RO],
["Russian Federation", "RU"],
["Rwanda", "RW"],
%w[Rwanda RW],
["Saint Barthélemy", "BL"],
["Saint Helena", "SH"],
["Saint Kitts and Nevis", "KN"],
@ -265,64 +266,64 @@
["Saint Martin (French part)", "MF"],
["Saint Pierre and Miquelon", "PM"],
["Saint Vincent, Grenadines", "VC"],
["Samoa", "WS"],
%w[Samoa WS],
["San Marino", "SM"],
["Sao Tome and Principe", "ST"],
["Saudi Arabia", "SA"],
["Senegal", "SN"],
["Serbia", "RS"],
["Seychelles", "SC"],
%w[Senegal SN],
%w[Serbia RS],
%w[Seychelles SC],
["Sierra Leone", "SL"],
["Singapore", "SG"],
%w[Singapore SG],
["Sint Maarten (Dutch part)", "SX"],
["Slovakia", "SK"],
["Slovenia", "SI"],
%w[Slovakia SK],
%w[Slovenia SI],
["Solomon Islands", "SB"],
["Somalia", "SO"],
%w[Somalia SO],
["South Africa", "ZA"],
["South Georgia", "GS"],
["South Sudan", "SS"],
["Spain", "ES"],
%w[Spain ES],
["Sri Lanka", "LK"],
["Sudan", "SD"],
["Suriname", "SR"],
%w[Sudan SD],
%w[Suriname SR],
["Svalbard and Jan Mayen", "SJ"],
["Swaziland", "SZ"],
["Sweden", "SE"],
["Switzerland", "CH"],
%w[Swaziland SZ],
%w[Sweden SE],
%w[Switzerland CH],
["Syrian Arab Republic", "SY"],
["Taiwan, Province of China", "TW"],
["Tajikistan", "TJ"],
["Tanzania", "TZ"],
["Thailand", "TH"],
%w[Tajikistan TJ],
%w[Tanzania TZ],
%w[Thailand TH],
["Timor-Leste", "TL"],
["Togo", "TG"],
["Tokelau", "TK"],
["Tonga", "TO"],
%w[Togo TG],
%w[Tokelau TK],
%w[Tonga TO],
["Trinidad and Tobago", "TT"],
["Tunisia", "TN"],
["Turkey", "TR"],
["Turkmenistan", "TM"],
%w[Tunisia TN],
%w[Turkey TR],
%w[Turkmenistan TM],
["Turks and Caicos Isl", "TC"],
["Tuvalu", "TV"],
["Uganda", "UG"],
["Ukraine", "UA"],
%w[Tuvalu TV],
%w[Uganda UG],
%w[Ukraine UA],
["United Arab Emirates", "AE"],
["United Kingdom", "GB"],
["United States", "US"],
["United States Minor", "UM"],
["Uruguay", "UY"],
["Uzbekistan", "UZ"],
["Vanuatu", "VU"],
["Venezuela", "VE"],
%w[Uruguay UY],
%w[Uzbekistan UZ],
%w[Vanuatu VU],
%w[Venezuela VE],
["Viet Nam", "VN"],
["Virgin Islands, British", "VG"],
["Virgin Islands, U.S.", "VI"],
["Wallis and Futuna", "WF"],
["Western Sahara", "EH"],
["Yemen", "YE"],
["Zambia", "ZM"],
["Zimbabwe", "ZW"]],
%w[Yemen YE],
%w[Zambia ZM],
%w[Zimbabwe ZW]],
@user.shipping_country,
) %>
</div>
@ -339,7 +340,7 @@
<%= f.label :shirt_gender, "Style" %><br>
<%= f.select :shirt_gender,
options_for_select(
[["Unisex", "unisex"],
[%w[Unisex unisex],
["Women's", "womens"]],
@user.shirt_gender,
) %>
@ -348,12 +349,12 @@
<%= f.label :shirt_size, "Size" %><br>
<%= f.select :shirt_size,
options_for_select(
[["Small", "s"],
["Medium", "m"],
["Large", "l"],
[%w[Small s],
%w[Medium m],
%w[Large l],
["Extra Large", "xl"],
["2XL", "2xl"],
["3XL", "3xl"]],
%w[2XL 2xl],
%w[3XL 3xl]],
@user.shirt_size,
) %>
</div>
@ -372,15 +373,15 @@
<%= f.select :experience_level,
options_for_select(
[["0 (Complete Newbie)", "0"],
["1", "1"],
["2", "2"],
%w[1 1],
%w[2 2],
["3 (Junior Developer)", "3"],
["4", "4"],
["5", "5"],
["6", "6"],
%w[4 4],
%w[5 5],
%w[6 6],
["7 (Experienced Developer)", "7"],
["8", "8"],
["9", "9"],
%w[8 8],
%w[9 9],
["10 (Senior Developer)", "10"]],
@user.experience_level,
) %>
@ -389,8 +390,8 @@
<%= f.label :tabs_or_spaces, "Tabs or spaces" %><br>
<%= f.select :tabs_or_spaces,
options_for_select(
[["Tabs", "tabs"],
["Spaces", "spaces"]],
[%w[Tabs tabs],
%w[Spaces spaces]],
@user.tabs_or_spaces,
) %>

View file

@ -1,4 +1,5 @@
<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js"
integrity="sha256-CJWfUCeP3jLdUMVNUll6yQx37gh9AKmXTRxvRf7jzro=" crossorigin="anonymous"></script>
<style>
textarea {
height: 140px;

View file

@ -117,7 +117,8 @@
<a class="second-slack" href="https://slack.com/oauth/authorize?scope=commands+bot+chat:write:bot+groups:write&client_id=3128000905.33373336070"><img alt="Add to Slack" height="40" width="139" src="https://platform.slack-edge.com/img/add_to_slack.png" srcset="https://platform.slack-edge.com/img/add_to_slack.png 1x, https://platform.slack-edge.com/img/add_to_slack@2x.png 2x"></a>
</div>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/typed.js/1.1.1/typed.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/typed.js/1.1.1/typed.min.js"
integrity="sha256-YPasiZgoiQnua4XI64s7hGPvui/esv17eFQbmhMd+KU=" crossorigin="anonymous"></script>
<script>
$(".typing").typed({
strings: ["/orly Making Your Own Parody Covers; Dont even leave Slack to do it; Kanye West"],

View file

@ -1,4 +1,6 @@
<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js"
integrity="sha256-CJWfUCeP3jLdUMVNUll6yQx37gh9AKmXTRxvRf7jzro=" crossorigin="anonymous"></script>
<style>
.widget header {
color: <%= HexComparer.new([@tag.bg_color_hex || "#0000000", @tag.text_color_hex || "#ffffff"]).brightness(0.8) %>

View file

@ -1,4 +1,6 @@
<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js" async="async"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js"
integrity="sha256-CJWfUCeP3jLdUMVNUll6yQx37gh9AKmXTRxvRf7jzro=" crossorigin="anonymous"></script>
<style>
.primary-sticky-nav-author, .primary-sticky-nav-author-element {
border: 1px solid <%= HexComparer.new([user_colors(@organization)[:bg], user_colors(@organization)[:text]]).brightness(0.88) %> !important;

View file

@ -1,4 +1,6 @@
<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js" async="async"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js"
integrity="sha256-CJWfUCeP3jLdUMVNUll6yQx37gh9AKmXTRxvRf7jzro=" crossorigin="anonymous"></script>
<h3>Join An Organization</h3>
<h5>Do you have the secret code?</h5>

View file

@ -1,4 +1,6 @@
<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js" async="async"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js"
integrity="sha256-CJWfUCeP3jLdUMVNUll6yQx37gh9AKmXTRxvRf7jzro=" crossorigin="anonymous"></script>
<% unless @user.identities.exists?(provider: 'github') %>
<div class="field">
<a href="/users/auth/github" class="big-button cta" data-no-instant>

View file

@ -17,7 +17,7 @@
key: "video-upload__#{SecureRandom.hex}",
key_starts_with: "video-upload__",
acl: "public-read",
max_file_size: (current_user.has_role?(:super_admin) ? 20000 : 6000).megabytes,
max_file_size: (current_user.has_role?(:super_admin) ? 20_000 : 6000).megabytes,
id: "s3-uploader",
class: "upload-form",
data: { key: :val } do %>
@ -36,7 +36,8 @@
</p>
</div>
</center>
<script src="https://code.jquery.com/jquery-3.3.1.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"
integrity="sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8=" crossorigin="anonymous"></script>
<%= javascript_include_tag "s3_direct_upload" %>
<script>
setTimeout(function () {