greatbody
/
freeCodeCamp
mirror of https://github.com/freeCodeCamp/freeCodeCamp.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

fix optimizely csp for script-src

pull/11371/head
Ivan Sebastian 2016-10-25 23:59:25 +07:00
parent 4cc3d0e4a4
commit 59a0788dfa
1 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
server/middlewares/csp.js
View File

@ -14,9 +14,9 @@ export default function csp() {
return helmet.contentSecurityPolicy({
directives: {
defaultSrc: trusted.concat([
'*.optimizely.com',
'https://*.cloudflare.com',
'*.cloudflare.com'
'*.cloudflare.com',
'https://*.optimizely.com'
]),
scriptSrc: [
"'unsafe-eval'",
@ -33,7 +33,8 @@ export default function csp() {
'*.twimg.com',
'https://*.twimg.com',
'*.youtube.com',
'*.ytimg.com'
'*.ytimg.com',
'https://*.optimizely.com'
].concat(trusted),
styleSrc: [
"'unsafe-inline'",
@ -42,7 +43,8 @@ export default function csp() {
'*.bootstrapcdn.com',
'https://*.bootstrapcdn.com',
'*.cloudflare.com',
'https://*.cloudflare.com'
'https://*.cloudflare.com',
'https://*.optimizely.com'
].concat(trusted),
fontSrc: [
'*.cloudflare.com',
@ -50,7 +52,8 @@ export default function csp() {
'*.bootstrapcdn.com',
'*.googleapis.com',
'*.gstatic.com',
'https://*.bootstrapcdn.com'
'https://*.bootstrapcdn.com',
'https://*.optimizely.com'
].concat(trusted),
imgSrc: [
// allow all input since we have user submitted images for