Even more testing
This commit is contained in:
@ -142,7 +142,10 @@ app.use(helmet.csp({
|
|||||||
].concat(trusted),
|
].concat(trusted),
|
||||||
'connect-src': [
|
'connect-src': [
|
||||||
].concat(trusted),
|
].concat(trusted),
|
||||||
styleSrc: trusted,
|
styleSrc: [
|
||||||
|
'http://fonts.googleapis.com/*',
|
||||||
|
'http://fonts.gstatic.com/*'
|
||||||
|
].concat(trusted),
|
||||||
imgSrc: [
|
imgSrc: [
|
||||||
/* allow all input since we have user submitted images for public profile*/
|
/* allow all input since we have user submitted images for public profile*/
|
||||||
'*'
|
'*'
|
||||||
|
Reference in New Issue
Block a user