gaspersic/freeCodeCamp
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

fix: url and CSP for deps

Browse Source
This commit is contained in:
Mrugesh Mohapatra
2018-08-15 15:02:41 +05:30
committed by Stuart Taylor
parent a505afb75c
commit 6b8061fa9a
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
server/middlewares/csp.js
View File

@ -5,7 +5,6 @@ let trusted = [
'https://search.freecodecamp.org',
'https://www.freecodecamp.rocks',
'https://api.freecodecamp.rocks',
'https://*.algolianet.com',
'https://' + process.env.AUTH0_DOMAIN
];
@ -29,7 +28,8 @@ export default function csp() {
'https://glitch.com',
'https://*.glitch.com',
'https://*.glitch.me',
'https://*.cloudflare.com'
'https://*.cloudflare.com',
'https://*.algolia.net'
]),
scriptSrc: [
"'unsafe-eval'",
@ -64,7 +64,8 @@ export default function csp() {
'*.bootstrapcdn.com',
'*.googleapis.com',
'*.gstatic.com',
'https://*.bootstrapcdn.com'
'https://*.bootstrapcdn.com',
'https://use.fontawesome.com'
].concat(trusted),
imgSrc: [
// allow all input since we have user submitted images for

2
server/views/partials/react-stylesheets.jade
View File

@ -1,6 +1,6 @@
link(rel='stylesheet', type='text/css' href='/css/lato.css')
link(rel='stylesheet', type='text/css' href='/css/ubuntu.css')
link(rel='stylesheet', href='https://use.fontawesome.com/releases/v5.0.13/js/all.css' integrity='sha384-xymdQtn1n3lH2wcu0qhcdaOpQwyoarkgLVxC/wZ5q7h9gHtxICrpcaSUfygqZGOe' crossorigin='anonymous')
link(rel='stylesheet', href='https://use.fontawesome.com/releases/v5.2.0/css/all.css' integrity='sha384-hWVjflwFxL6sNzntih27bfxkr27PmbbK/iSvJ+a4+0owXq79v+lsFkW54bOGbiDQ' crossorigin='anonymous')
link(rel='stylesheet', href=cacheBreaker(rev('/css', 'main.css')))
include meta