force https for blob url in _frame.js. Updates helmet to allow more inspectlet domains.

2015-06-16 15:59:22 -04:00
parent 1607fe0ba5
commit 810bf9a3f7
2 changed files with 3 additions and 2 deletions
--- a/server/server.js
+++ b/server/server.js
@ -132,7 +132,8 @@ var trusted = [
  'wss://inspectletws.herokuapp.com/',
  'http://hn.inspectlet.com/',
  '*.googleapis.com',
-  '*.gstatic.com'
+  '*.gstatic.com',
+  'https://hn.inspectlet.com/'
 ];

 app.use(helmet.csp({