yuuza/outline
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: Remove zapier from CSP on self-hosted

Browse Source
This commit is contained in:
Tom Moor
2023-10-09 21:11:05 -04:00
parent 4181aa0f3c
commit fec1a72780
1 changed files with 7 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
server/services/web.ts
View File

@@ -26,19 +26,14 @@ const isProduction = env.ENVIRONMENT === "production";
// Construct scripts CSP based on services in use by this installation
const defaultSrc = ["'self'"];
const scriptSrc = [
"'self'",
"gist.github.com",
"www.googletagmanager.com",
"cdn.zapier.com",
];
const scriptSrc = ["'self'", "gist.github.com", "www.googletagmanager.com"];
const styleSrc = [
"'self'",
"'unsafe-inline'",
"github.githubassets.com",
"cdn.zapier.com",
];
const styleSrc = ["'self'", "'unsafe-inline'", "github.githubassets.com"];
if (env.isCloudHosted) {
scriptSrc.push("cdn.zapier.com");
styleSrc.push("cdn.zapier.com");
}
// Allow to load assets from Vite
if (!isProduction) {