Mirrors/unleash.unleash
1
0
Fork 0
mirror of https://github.com/Unleash/unleash.git synced 2025-08-04 13:48:56 +02:00
Code Issues Projects Releases Wiki Activity

fix: make sure our CSP allow gravatar.com for images

Browse Source
This commit is contained in:
Ivar Conradi Østhus 2022-01-12 23:22:04 +01:00
parent 12e78663b0
commit 4a5b332567
No known key found for this signature in database
GPG Key ID: 31AC596886B0BD09
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/lib/middleware/secure-headers.ts
View File

@ -13,7 +13,7 @@ const secureHeaders: (config: IUnleashConfig) => RequestHandler = (config) => {
}, },
contentSecurityPolicy: { contentSecurityPolicy: {
directives: { directives: {
defaultSrc: ["'self'", 'cdn.getunleash.io'], defaultSrc: ["'self'", 'cdn.getunleash.io', 'gravatar.com'],
fontSrc: [ fontSrc: [
"'self'", "'self'",
'cdn.getunleash.io', 'cdn.getunleash.io',
@ -37,6 +37,7 @@ const secureHeaders: (config: IUnleashConfig) => RequestHandler = (config) => {
], ],
}, },
}, },
crossOriginEmbedderPolicy: false,
}); });
} }
return (req, res, next) => { return (req, res, next) => {

1
src/server-dev.ts
View File

@ -24,6 +24,7 @@ process.nextTick(async () => {
}, },
logLevel: LogLevel.debug, logLevel: LogLevel.debug,
enableOAS: true, enableOAS: true,
// secureHeaders: true,
versionCheck: { versionCheck: {
enable: false, enable: false,
}, },