Feature(challenges): Load and cache required files

2016-07-28 20:01:17 -07:00
parent 2d7e96045c
commit 2e9b179626
2 changed files with 48 additions and 10 deletions
--- a/server/middlewares/csp.js
+++ b/server/middlewares/csp.js
@@ -15,7 +15,11 @@ if (process.env.NODE_ENV !== 'production') {
 export default function csp() {
  return helmet.contentSecurityPolicy({
    directives: {
-      defaultSrc: trusted.concat('*.optimizely.com'),
+      defaultSrc: trusted.concat([
+        '*.optimizely.com',
+        'https://*.cloudflare.com',
+        '*.cloudflare.com'
+      ]),
      scriptSrc: [
        "'unsafe-eval'",
        "'unsafe-inline'",