Update CSP to remove vimeo and add youtube

2016-04-19 00:23:27 -07:00
parent 6f9b6d7f2b
commit f1b5bffdd8
1 changed files with 1 additions and 5 deletions
--- a/server/middlewares/csp.js
+++ b/server/middlewares/csp.js
@ -26,10 +26,6 @@ export default function csp() {
        '*.jsdelivr.com',
        '*.twimg.com',
        'https://*.twimg.com',
-        'vimeo.com'
-      ].concat(trusted),
-      connectSrc: [
-        'vimeo.com'
      ].concat(trusted),
      styleSrc: [
        "'unsafe-inline'",
@ -62,7 +58,7 @@ export default function csp() {
      frameSrc: [
        '*.gitter.im',
        '*.gitter.im https:',
-        '*.vimeo.com',
+        '*.youtube.com',
        '*.twitter.com',
        '*.ghbtns.com',
        '*.freecatphotoapp.com',