maverick/flex-template-web
1
0
Fork 0
mirror of https://github.com/kingomarnajjar/flex-template-web.git synced 2026-07-28 03:43:28 +10:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #697 from sharetribe/csp-improvements

Browse source 
CSP improvements
This commit is contained in:
Kimmo Puputti 2018-02-08 14:07:03 +02:00 • committed by GitHub
commit 37279072d4
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
server/csp.js
View file

@ -20,6 +20,7 @@ const sentryClientEnabled = !!process.env.REACT_APP_PUBLIC_SENTRY_DSN;
module.exports = (reportUri, enforceSsl, reportOnly) => {
const self = "'self'";
const inline = "'unsafe-inline'";
const data = 'data:';
const sharetribeApi = config.sdk.baseUrl;
const sharetribeAssets = 'https://assets-sharetribecom.sharetribe.com/';
const imgix = '*.imgix.net/';
@ -41,7 +42,7 @@ module.exports = (reportUri, enforceSsl, reportOnly) => {
const imgSrc = [
self,
'data:',
data,
imgix,
loremPixel,
placeholder,
@ -53,7 +54,7 @@ module.exports = (reportUri, enforceSsl, reportOnly) => {
const connectSrc = [self, sharetribeApi, googleMaps];
const fontSrc = [self, sharetribeAssets, googleStaticFonts];
const fontSrc = [self, data, sharetribeAssets, googleStaticFonts];
const frameSrc = [self, stripeJs];