whitelist the akamaihd.net url that Facebook uses to host profile images

pull/10/head
Michael Q Larson 2015-01-01 00:51:52 -08:00
parent 1660097544
commit f82a86ca93
1 changed files with 2 additions and 1 deletions

3
app.js
View File

@ -137,12 +137,13 @@ app.use(helmet.contentSecurityPolicy({
styleSrc: trusted, styleSrc: trusted,
imgSrc: [ imgSrc: [
'*.evernote.com', '*.evernote.com',
'*.facebook.com',
'*.amazonaws.com', '*.amazonaws.com',
'data:', 'data:',
'*.licdn.com', '*.licdn.com',
'*.gravatar.com', '*.gravatar.com',
'*.youtube.com', '*.youtube.com',
'*.akamaihd.net',
'graph.facebook.com',
'*.githubusercontent.com', '*.githubusercontent.com',
'*.googleusercontent.com', '*.googleusercontent.com',
].concat(trusted), ].concat(trusted),