add git gulp and browser-sync which still is not working properly

This commit is contained in:
Michael Q Larson
2014-12-22 13:38:48 -08:00
parent 9849acd49e
commit 6ed5c5e8e0
3 changed files with 73 additions and 4 deletions

14
app.js
View File

@ -3,6 +3,7 @@
*/
require('newrelic');
var express = require('express');
var debug = require('debug')('freecc:server');
var cookieParser = require('cookie-parser');
var compress = require('compression');
var session = require('express-session');
@ -105,13 +106,24 @@ var trusted = [
"'unsafe-eval'",
"'unsafe-inline'"
];
//var connectSrc;
//if (process.env.NODE_ENV === 'development') {
// debug('Pushing');
// connectSrc = ['"self"', 'ws://localhost:3001/'];
//} else {
// debug('Not');
// connectSrc = [];
//}
debug(trusted);
app.use(helmet.contentSecurityPolicy({
defaultSrc: trusted,
scriptSrc: ['*.optimizely.com'].concat(trusted),
'connect-src': process.env.NODE_ENV === 'development' ? ['ws://localhost:3001/', 'http://localhost:3001/'] : [],
styleSrc: trusted,
imgSrc: ['*.evernote.com', '*.amazonaws.com', "data:"].concat(trusted),
fontSrc: ["'self", '*.googleapis.com'].concat(trusted),
mediaSrc: ['*.amazonaws.com', '*.twitter'],
mediaSrc: ['*.amazonaws.com', '*.twitter.com'],
frameSrc: ['*.gitter.im', '*.vimeo.com', '*.twitter.com'],
// sandbox: ['allow-forms', 'allow-scripts'],
// reportUri: '/report-violation',