Change CSP config format to be more intuitive
This commit is contained in:
@@ -15,17 +15,9 @@ module.exports = {
|
||||
},
|
||||
csp: {
|
||||
enable: true,
|
||||
reportUri: '',
|
||||
directives: {
|
||||
defaultSrc: ["'self'"],
|
||||
scriptSrc: ["'self'", "'unsafe-eval'", "vimeo.com", "https://gist.github.com", "www.slideshare.net", "https://query.yahooapis.com", "https://*.disqus.com"],
|
||||
imgSrc: ["*"],
|
||||
styleSrc: ["'self'", "'unsafe-inline'", "https://assets-cdn.github.com"],
|
||||
fontSrc: ["'self'", "https://public.slidesharecdn.com"],
|
||||
objectSrc: ["*"],
|
||||
childSrc: ["*"],
|
||||
connectSrc: ["'self'", "https://links.services.disqus.com", "wss://realtime.services.disqus.com"]
|
||||
},
|
||||
addDefaults: true,
|
||||
upgradeInsecureRequests: 'auto'
|
||||
},
|
||||
protocolusessl: false,
|
||||
|
||||
Reference in New Issue
Block a user