浏览代码

Remove CSP (#1418)

* remove csp

* remove csp from now.json
vanilla_orig
David Luzar 5 年前
父节点
当前提交
0b971ea570
没有帐户链接到提交者的电子邮件
共有 2 个文件被更改,包括 0 次插入8 次删除
  1. 0
    4
      now.json
  2. 0
    4
      public/index.html

+ 0
- 4
now.json 查看文件

@@ -18,10 +18,6 @@
18 18
         {
19 19
           "key": "Referrer-Policy",
20 20
           "value": "origin"
21
-        },
22
-        {
23
-          "key": "Content-Security-Policy",
24
-          "value": "default-src https: data: 'unsafe-inline'; connect-src https://*.excalidraw.com https://*.excalidraw.now.sh wss://excalidraw-socket.herokuapp.com https://excalidraw-socket.herokuapp.com https://sentry.io;"
25 21
         }
26 22
       ]
27 23
     }

+ 0
- 4
public/index.html 查看文件

@@ -64,10 +64,6 @@
64 64
     />
65 65
     <!-- OG tags require absolute url for images -->
66 66
     <meta name="twitter:image" content="https://excalidraw.com/og-image.png" />
67
-    <meta
68
-      http-equiv="Content-Security-Policy"
69
-      content="block-all-mixed-content; child-src 'self' https://codesandbox.io https://*.csb.app; worker-src 'self'; connect-src 'self' https: wss: http: ws:; default-src 'self'; font-src 'self' data: https: filesystem:; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://codesandbox.io https://*.csb.app https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https:;"
70
-    />
71 67
     <link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
72 68
     <link
73 69
       href="https://excalidraw-socket.herokuapp.com/socket.io"

正在加载...
取消
保存