瀏覽代碼

Remove CSP (#1418)

* remove csp

* remove csp from now.json
vanilla_orig
David Luzar 5 年之前
父節點
當前提交
0b971ea570
沒有連結到貢獻者的電子郵件帳戶。
共有 2 個檔案被更改,包括 0 行新增8 行删除
  1. 0
    4
      now.json
  2. 0
    4
      public/index.html

+ 0
- 4
now.json 查看文件

18
         {
18
         {
19
           "key": "Referrer-Policy",
19
           "key": "Referrer-Policy",
20
           "value": "origin"
20
           "value": "origin"
21
-        },
22
-        {
23
-          "key": "Content-Security-Policy",
24
-          "value": "default-src https: data: 'unsafe-inline'; connect-src https://*.excalidraw.com https://*.excalidraw.now.sh wss://excalidraw-socket.herokuapp.com https://excalidraw-socket.herokuapp.com https://sentry.io;"
25
         }
21
         }
26
       ]
22
       ]
27
     }
23
     }

+ 0
- 4
public/index.html 查看文件

64
     />
64
     />
65
     <!-- OG tags require absolute url for images -->
65
     <!-- OG tags require absolute url for images -->
66
     <meta name="twitter:image" content="https://excalidraw.com/og-image.png" />
66
     <meta name="twitter:image" content="https://excalidraw.com/og-image.png" />
67
-    <meta
68
-      http-equiv="Content-Security-Policy"
69
-      content="block-all-mixed-content; child-src 'self' https://codesandbox.io https://*.csb.app; worker-src 'self'; connect-src 'self' https: wss: http: ws:; default-src 'self'; font-src 'self' data: https: filesystem:; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://codesandbox.io https://*.csb.app https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https:;"
70
-    />
71
     <link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
67
     <link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
72
     <link
68
     <link
73
       href="https://excalidraw-socket.herokuapp.com/socket.io"
69
       href="https://excalidraw-socket.herokuapp.com/socket.io"

Loading…
取消
儲存