Bläddra i källkod

Remove CSP (#1418)

* remove csp

* remove csp from now.json
vanilla_orig
David Luzar 5 år sedan
förälder
incheckning
0b971ea570
Inget konto är kopplat till bidragsgivarens mejladress
2 ändrade filer med 0 tillägg och 8 borttagningar
  1. 0
    4
      now.json
  2. 0
    4
      public/index.html

+ 0
- 4
now.json Visa fil

@@ -18,10 +18,6 @@
18 18
         {
19 19
           "key": "Referrer-Policy",
20 20
           "value": "origin"
21
-        },
22
-        {
23
-          "key": "Content-Security-Policy",
24
-          "value": "default-src https: data: 'unsafe-inline'; connect-src https://*.excalidraw.com https://*.excalidraw.now.sh wss://excalidraw-socket.herokuapp.com https://excalidraw-socket.herokuapp.com https://sentry.io;"
25 21
         }
26 22
       ]
27 23
     }

+ 0
- 4
public/index.html Visa fil

@@ -64,10 +64,6 @@
64 64
     />
65 65
     <!-- OG tags require absolute url for images -->
66 66
     <meta name="twitter:image" content="https://excalidraw.com/og-image.png" />
67
-    <meta
68
-      http-equiv="Content-Security-Policy"
69
-      content="block-all-mixed-content; child-src 'self' https://codesandbox.io https://*.csb.app; worker-src 'self'; connect-src 'self' https: wss: http: ws:; default-src 'self'; font-src 'self' data: https: filesystem:; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://codesandbox.io https://*.csb.app https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https:;"
70
-    />
71 67
     <link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
72 68
     <link
73 69
       href="https://excalidraw-socket.herokuapp.com/socket.io"

Laddar…
Avbryt
Spara