greatbody
/
freeCodeCamp
mirror of https://github.com/freeCodeCamp/freeCodeCamp.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

update helmet csp for facebook images

pull/10/head
Michael Q Larson 2015-01-01 00:33:03 -08:00
parent 35847faaac
commit 1660097544
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
app.js
View File

@ -115,8 +115,6 @@ var trusted = [
"*.doubleclick.net", "*.doubleclick.net",
"*.twitter.com", "*.twitter.com",
'*.twimg.com', '*.twimg.com',
"*.githubusercontent.com",
"*.googleusercontent.com",
"'unsafe-eval'", "'unsafe-eval'",
"'unsafe-inline'", "'unsafe-inline'",
"*.rafflecopter.com", "*.rafflecopter.com",
@ -139,11 +137,14 @@ app.use(helmet.contentSecurityPolicy({
styleSrc: trusted, styleSrc: trusted,
imgSrc: [ imgSrc: [
'*.evernote.com', '*.evernote.com',
'*.facebook.com',
'*.amazonaws.com', '*.amazonaws.com',
'data:', 'data:',
'*.licdn.com', '*.licdn.com',
'*.gravatar.com', '*.gravatar.com',
'*.youtube.com' '*.youtube.com',
'*.githubusercontent.com',
'*.googleusercontent.com',
].concat(trusted), ].concat(trusted),
fontSrc: ['*.googleapis.com'].concat(trusted), fontSrc: ['*.googleapis.com'].concat(trusted),
mediaSrc: [ mediaSrc: [