diff --git a/server/middlewares/csp.js b/server/middlewares/csp.js index 165d862620..9837a09e88 100644 --- a/server/middlewares/csp.js +++ b/server/middlewares/csp.js @@ -5,7 +5,6 @@ let trusted = [ 'https://search.freecodecamp.org', 'https://www.freecodecamp.rocks', 'https://api.freecodecamp.rocks', - 'https://*.algolianet.com', 'https://' + process.env.AUTH0_DOMAIN ]; @@ -29,7 +28,8 @@ export default function csp() { 'https://glitch.com', 'https://*.glitch.com', 'https://*.glitch.me', - 'https://*.cloudflare.com' + 'https://*.cloudflare.com', + 'https://*.algolia.net' ]), scriptSrc: [ "'unsafe-eval'", @@ -64,7 +64,8 @@ export default function csp() { '*.bootstrapcdn.com', '*.googleapis.com', '*.gstatic.com', - 'https://*.bootstrapcdn.com' + 'https://*.bootstrapcdn.com', + 'https://use.fontawesome.com' ].concat(trusted), imgSrc: [ // allow all input since we have user submitted images for diff --git a/server/views/partials/react-stylesheets.jade b/server/views/partials/react-stylesheets.jade index 635c47b9ff..be6c4db8ac 100644 --- a/server/views/partials/react-stylesheets.jade +++ b/server/views/partials/react-stylesheets.jade @@ -1,6 +1,6 @@ link(rel='stylesheet', type='text/css' href='/css/lato.css') link(rel='stylesheet', type='text/css' href='/css/ubuntu.css') -link(rel='stylesheet', href='https://use.fontawesome.com/releases/v5.0.13/js/all.css' integrity='sha384-xymdQtn1n3lH2wcu0qhcdaOpQwyoarkgLVxC/wZ5q7h9gHtxICrpcaSUfygqZGOe' crossorigin='anonymous') +link(rel='stylesheet', href='https://use.fontawesome.com/releases/v5.2.0/css/all.css' integrity='sha384-hWVjflwFxL6sNzntih27bfxkr27PmbbK/iSvJ+a4+0owXq79v+lsFkW54bOGbiDQ' crossorigin='anonymous') link(rel='stylesheet', href=cacheBreaker(rev('/css', 'main.css'))) include meta