natty
/
fox-send
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

changed CSP quotes

This commit is contained in:
Danny Coates 2017-07-17 15:49:09 -07:00
parent 5ce0846580
commit 6970e9228a
No known key found for this signature in database
GPG Key ID: 4C442633C62E00CB
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
server/server.js
View File

@ -35,24 +35,24 @@ app.use(helmet());
app.use( app.use(
helmet.contentSecurityPolicy({ helmet.contentSecurityPolicy({
directives: { directives: {
defaultSrc: ['"self"'], defaultSrc: ["'self'"],
connectSrc: [ connectSrc: [
'"self"', "'self'",
'https://sentry.prod.mozaws.net', 'https://sentry.prod.mozaws.net',
'https://www.google-analytics.com', 'https://www.google-analytics.com',
'https://ssl.google-analytics.com' 'https://ssl.google-analytics.com'
], ],
imgSrc: [ imgSrc: [
'"self"', "'self'",
'https://www.google-analytics.com', 'https://www.google-analytics.com',
'https://ssl.google-analytics.com' 'https://ssl.google-analytics.com'
], ],
scriptSrc: ['"self"', 'https://ssl.google-analytics.com'], scriptSrc: ["'self'", 'https://ssl.google-analytics.com'],
styleSrc: ['"self"', 'https://code.cdn.mozilla.net'], styleSrc: ["'self'", 'https://code.cdn.mozilla.net'],
fontSrc: ['"self"', 'https://code.cdn.mozilla.net'], fontSrc: ["'self'", 'https://code.cdn.mozilla.net'],
formAction: ['"none"'], formAction: ["'none'"],
frameAncestors: ['"none"'], frameAncestors: ["'none'"],
objectSrc: ['"none"'] objectSrc: ["'none'"]
} }
}) })
); );