gaspersic/freeCodeCamp
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

hide public profile button if no username

Browse Source
This commit is contained in:
Michael Q Larson
2015-01-09 07:53:29 -08:00
parent f8e9fd5d95
commit a23a79d8c6
2 changed files with 11 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
app.js
View File

@ -121,8 +121,11 @@ var trusted = [
'*.bootstrapcdn.com', '*.bootstrapcdn.com',
'*.cloudflare.com', '*.cloudflare.com',
'localhost:3001', 'localhost:3001',
'localhost:3000' 'ws://localhost:3001/',
'http://localhost:3001',
'localhost:3000',
'ws://localhost:3000/',
'http://localhost:3000'
]; ];
debug(trusted); debug(trusted);
@ -134,10 +137,8 @@ app.use(helmet.contentSecurityPolicy({
'wss://*.rafflecopter.com', 'wss://*.rafflecopter.com',
'https://*.rafflecopter.com', 'https://*.rafflecopter.com',
'ws://www.freecodecamp.com', 'ws://www.freecodecamp.com',
'ws://localhost:3001/',
'http://localhost:3001',
'http://www.freecodecamp.com' 'http://www.freecodecamp.com'
], ].concat(trusted),
styleSrc: trusted, styleSrc: trusted,
imgSrc: [ imgSrc: [
'*.evernote.com', '*.evernote.com',
@ -150,20 +151,20 @@ app.use(helmet.contentSecurityPolicy({
'graph.facebook.com', 'graph.facebook.com',
'*.githubusercontent.com', '*.githubusercontent.com',
'*.googleusercontent.com', '*.googleusercontent.com',
'*' '*' /* allow all input since we have user submitted images for public profile*/
].concat(trusted), ].concat(trusted),
fontSrc: ['*.googleapis.com'].concat(trusted), fontSrc: ['*.googleapis.com'].concat(trusted),
mediaSrc: [ mediaSrc: [
'*.amazonaws.com', '*.amazonaws.com',
'*.twitter.com' '*.twitter.com'
], ].concat(trusted),
frameSrc: [ frameSrc: [
'*.gitter.im', '*.gitter.im',
'*.vimeo.com', '*.vimeo.com',
'*.twitter.com', '*.twitter.com',
'*.rafflecopter.com', '*.rafflecopter.com',
'*.youtube.com' '*.youtube.com'
], ].concat(trusted),
reportOnly: false, // set to true if you only want to report errors reportOnly: false, // set to true if you only want to report errors
setAllHeaders: false, // set to true if you want to set all headers setAllHeaders: false, // set to true if you want to set all headers
safari5: false // set to true if you want to force buggy CSP in Safari 5 safari5: false // set to true if you want to force buggy CSP in Safari 5

1
views/account/profile.jade
View File

@ -224,6 +224,7 @@ block content
.panel-heading.text-center Actions .panel-heading.text-center Actions
.panel-body .panel-body
.col-xs-12 .col-xs-12
if (user.profile.username)
a.btn.btn-lg.btn-block.btn-info.btn-link-social(href='/campers/#{user.profile.username}') Check out my Public Profile a.btn.btn-lg.btn-block.btn-info.btn-link-social(href='/campers/#{user.profile.username}') Check out my Public Profile
a.btn.btn-lg.btn-block.btn-primary.btn-link-social(href='/') Take me to my current challenge a.btn.btn-lg.btn-block.btn-primary.btn-link-social(href='/') Take me to my current challenge
a.btn.btn-lg.btn-block.btn-warning.btn-link-social(href='/logout') Sign out a.btn.btn-lg.btn-block.btn-warning.btn-link-social(href='/logout') Sign out