deepcrayon
/
lila
1
0
Fork 0
Code Releases Activity

no need for unsafe-inline fallback for nonce since safari 10

pull/5405/head
Niklas Fiekas 2019-08-05 23:17:14 +02:00
parent 6f48b5e269
commit 831c2df2ec
1 changed files with 1 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
modules/common/src/main/ContentSecurityPolicy.scala
View File

@ -12,13 +12,7 @@ case class ContentSecurityPolicy(
baseUri: List[String]
) {
private def withScriptSrc(source: String) = copy(scriptSrc = source :: scriptSrc)
def withNonce(nonce: Nonce) = copy(
// Nonces are not supported by Safari but 'unsafe-inline' is ignored by
// better browsers if there are also nonces.
scriptSrc = nonce.scriptSrc :: "'unsafe-inline'" :: scriptSrc
)
def withNonce(nonce: Nonce) = copy(scriptSrc = nonce.scriptSrc :: scriptSrc)
def withStripe = copy(
connectSrc = "https://*.stripe.com" :: connectSrc,