History

Remove http:// URLs from CSP

Thibaut Courouble committed 8 years ago

Commit 5c886a41 parent db523e21 file · +1 −1Browse files

Showing the changes to lib (1 of 1 file). Show all

Unified · Split

lib/app.rb+1−1
@@ -69,7 +69,7 @@ class App < Sinatra::Application · 68 unmodified lines
69 set :static, false69 set :static, false
70 set :cdn_origin, 'https://cdn.devdocs.io'70 set :cdn_origin, 'https://cdn.devdocs.io'
71 set :docs_origin, '//docs.devdocs.io'71 set :docs_origin, '//docs.devdocs.io'
72 set :csp, "default-src 'self' *; script-src 'self' 'nonce-devdocs' http://cdn.devdocs.io https://cdn.devdocs.io https://www.google-analytics.com https://secure.gaug.es http://*.jquery.com https://*.jquery.com; font-src 'none'; style-src 'self' 'unsafe-inline' *; img-src 'self' * data:;"72 set :csp, "default-src 'self' *; script-src 'self' 'nonce-devdocs' https://cdn.devdocs.io https://www.google-analytics.com https://secure.gaug.es https://*.jquery.com; font-src 'none'; style-src 'self' 'unsafe-inline' *; img-src 'self' * data:;"
73 73
74 use Rack::ConditionalGet74 use Rack::ConditionalGet
75 use Rack::ETag75 use Rack::ETag

Keyboard shortcuts

General

Show keyboard shortcuts
?
Focus the current search
/

Issues and pull requests

Open filters
f

Issues, pull requests and Inbox

Select next item
j↓
Select previous item
k↑
Open selected item
Enter
Dismiss filters or clear selection
Esc

Repository code

Go to file
t