gaspersic/freeCodeCamp
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

whitelist freecodecamp specifically in script src for helmet

Browse Source
This commit is contained in:
terakilobyte
2015-05-06 09:24:27 -04:00
parent adaa3cdece
commit 3919919daf
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app.js
View File

@ -126,6 +126,7 @@ app.use(function(req, res, next) {
var trusted = [ var trusted = [
"'self'", "'self'",
'*.freecodecamp.com', '*.freecodecamp.com',
'http://www.freecodecamp.com/*',
'*.gstatic.com', '*.gstatic.com',
'*.google-analytics.com', '*.google-analytics.com',
'*.googleapis.com', '*.googleapis.com',
@ -167,7 +168,8 @@ app.use(helmet.contentSecurityPolicy({
scriptSrc: [ scriptSrc: [
'*.optimizely.com', '*.optimizely.com',
'*.aspnetcdn.com', '*.aspnetcdn.com',
'*.d3js.org' '*.d3js.org',
'*.freecodecamp.com'
].concat(trusted), ].concat(trusted),
'connect-src': [ 'connect-src': [
'ws://*.rafflecopter.com', 'ws://*.rafflecopter.com',