Chapril/drop.chapril.org-firefoxsend
Chapril/drop.chapril.org-firefoxsend
25
1
Fork 0
Code Issues Releases Activity

changed CSP quotes

Browse Source
This commit is contained in:
Danny Coates 2017-07-17 15:49:09 -07:00
parent 5ce0846580
commit 6970e9228a
No known key found for this signature in database
GPG Key ID: 4C442633C62E00CB
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
server/server.js
View File

@ -35,24 +35,24 @@ app.use(helmet());
app.use(
helmet.contentSecurityPolicy({
directives: {
defaultSrc: ['"self"'],
defaultSrc: ["'self'"],
connectSrc: [
'"self"',
"'self'",
'https://sentry.prod.mozaws.net',
'https://www.google-analytics.com',
'https://ssl.google-analytics.com'
],
imgSrc: [
'"self"',
"'self'",
'https://www.google-analytics.com',
'https://ssl.google-analytics.com'
],
scriptSrc: ['"self"', 'https://ssl.google-analytics.com'],
styleSrc: ['"self"', 'https://code.cdn.mozilla.net'],
fontSrc: ['"self"', 'https://code.cdn.mozilla.net'],
formAction: ['"none"'],
frameAncestors: ['"none"'],
objectSrc: ['"none"']
scriptSrc: ["'self'", 'https://ssl.google-analytics.com'],
styleSrc: ["'self'", 'https://code.cdn.mozilla.net'],
fontSrc: ["'self'", 'https://code.cdn.mozilla.net'],
formAction: ["'none'"],
frameAncestors: ["'none'"],
objectSrc: ["'none'"]
}
})
);