mirror of
https://github.com/hedgedoc/hedgedoc.git
synced 2025-05-14 23:24:46 -04:00
Change CSP config format to be more intuitive
This commit is contained in:
parent
5b83deb043
commit
91101c856c
5 changed files with 48 additions and 14 deletions
|
@ -15,17 +15,9 @@ module.exports = {
|
|||
},
|
||||
csp: {
|
||||
enable: true,
|
||||
reportUri: '',
|
||||
directives: {
|
||||
defaultSrc: ["'self'"],
|
||||
scriptSrc: ["'self'", "'unsafe-eval'", "vimeo.com", "https://gist.github.com", "www.slideshare.net", "https://query.yahooapis.com", "https://*.disqus.com"],
|
||||
imgSrc: ["*"],
|
||||
styleSrc: ["'self'", "'unsafe-inline'", "https://assets-cdn.github.com"],
|
||||
fontSrc: ["'self'", "https://public.slidesharecdn.com"],
|
||||
objectSrc: ["*"],
|
||||
childSrc: ["*"],
|
||||
connectSrc: ["'self'", "https://links.services.disqus.com", "wss://realtime.services.disqus.com"]
|
||||
},
|
||||
addDefaults: true,
|
||||
upgradeInsecureRequests: 'auto'
|
||||
},
|
||||
protocolusessl: false,
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue