maverick/flex-template-web
1
0
Fork 0
mirror of https://github.com/kingomarnajjar/flex-template-web.git synced 2026-07-26 06:47:17 +10:00
Code Issues Projects Releases Packages Wiki Activity Actions

Whitelist Stripe API in the CSP

Browse source
This commit is contained in:
Kimmo Puputti 2018-02-09 16:38:35 +02:00
parent 1b0517ee6c
commit 8e0500fe7a
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
server/csp.js
View file

@ -34,6 +34,7 @@ module.exports = (reportUri, enforceSsl, reportOnly) => {
const googleFonts = 'https://fonts.googleapis.com/';
const stripeJs = 'https://js.stripe.com/';
const stripeQ = 'https://q.stripe.com/';
const stripeApi = 'https://api.stripe.com/';
const sentryApi = 'https://sentry.io/api/';
const scriptSrc = [self, inline, googleMaps, stripeJs];
@ -52,7 +53,7 @@ module.exports = (reportUri, enforceSsl, reportOnly) => {
googleStaticMaps,
];
const connectSrc = [self, sharetribeApi, googleMaps];
const connectSrc = [self, sharetribeApi, googleMaps, stripeApi];
const fontSrc = [self, data, sharetribeAssets, googleStaticFonts];