maverick/flex-template-web
1
0
Fork 0
mirror of https://github.com/kingomarnajjar/flex-template-web.git synced 2026-07-28 03:43:28 +10:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #700 from sharetribe/add-stripe-api-to-csp

Browse source 
Whitelist Stripe API in the CSP
This commit is contained in:
Kimmo Puputti 2018-02-09 16:44:30 +02:00 • committed by GitHub
commit 65bbd528f8
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
server/csp.js
View file

@ -34,6 +34,7 @@ module.exports = (reportUri, enforceSsl, reportOnly) => {
const googleFonts = 'https://fonts.googleapis.com/';
const stripeJs = 'https://js.stripe.com/';
const stripeQ = 'https://q.stripe.com/';
const stripeApi = 'https://api.stripe.com/';
const sentryApi = 'https://sentry.io/api/';
const scriptSrc = [self, inline, googleMaps, stripeJs];
@ -52,7 +53,7 @@ module.exports = (reportUri, enforceSsl, reportOnly) => {
googleStaticMaps,
];
const connectSrc = [self, sharetribeApi, googleMaps];
const connectSrc = [self, sharetribeApi, googleMaps, stripeApi];
const fontSrc = [self, data, sharetribeAssets, googleStaticFonts];