yogsototh/sophia.events
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add additional sources in CSP header

Browse source
This commit is contained in:
Luc Juggery 2018-02-02 15:15:47 +01:00
parent 429db13937
commit 1f0eeaeedf
3 changed files with 6 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
template/index.mustache
View file

@ -1,7 +1,8 @@
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Security-Policy" content="default-src 'self';script-src www.googletagmanager.com 'unsafe-inline';style-src fonts.googleapis.com maxcdn.bootstrapcdn.com 'self'">
<meta http-equiv="Content-Security-Policy"
content="default-src maxcdn.bootstrapcdn.com 'self';script-src code.jquery.com cdn.jsdelivr.net www.googletagmanager.com 'unsafe-inline' 'self';style-src fonts.googleapis.com maxcdn.bootstrapcdn.com 'self';font-src fonts.gstatic.com fonts.googleapis.com maxcdn.bootstrapcdn.com 'self'">
<script async src="https://www.googletagmanager.com/gtag/js?id=UA-113065209-1"></script>
<script>
window.dataLayer = window.dataLayer || [];

3
www/index.html
View file

@ -1,7 +1,8 @@
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Security-Policy" content="default-src 'self';script-src www.googletagmanager.com 'unsafe-inline';style-src fonts.googleapis.com maxcdn.bootstrapcdn.com 'self'">
<meta http-equiv="Content-Security-Policy"
content="default-src maxcdn.bootstrapcdn.com 'self';script-src code.jquery.com cdn.jsdelivr.net www.googletagmanager.com 'unsafe-inline' 'self';style-src fonts.googleapis.com maxcdn.bootstrapcdn.com 'self';font-src fonts.gstatic.com fonts.googleapis.com maxcdn.bootstrapcdn.com 'self'">
<script async src="https://www.googletagmanager.com/gtag/js?id=UA-113065209-1"></script>
<script>
window.dataLayer = window.dataLayer || [];

3
www/past.html
View file

@ -1,7 +1,8 @@
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Security-Policy" content="default-src 'self';script-src www.googletagmanager.com 'unsafe-inline';style-src fonts.googleapis.com maxcdn.bootstrapcdn.com 'self'">
<meta http-equiv="Content-Security-Policy"
content="default-src maxcdn.bootstrapcdn.com 'self';script-src code.jquery.com cdn.jsdelivr.net www.googletagmanager.com 'unsafe-inline' 'self';style-src fonts.googleapis.com maxcdn.bootstrapcdn.com 'self';font-src fonts.gstatic.com fonts.googleapis.com maxcdn.bootstrapcdn.com 'self'">
<script async src="https://www.googletagmanager.com/gtag/js?id=UA-113065209-1"></script>
<script>
window.dataLayer = window.dataLayer || [];