CSP implementation

This commit is contained in:
Rene V. Vergara A. 2023-08-29 09:28:22 -05:00
parent 299cae0c80
commit fdfc679b03
3 changed files with 12 additions and 4 deletions

4
package-lock.json generated
View file

@ -1,12 +1,12 @@
{ {
"name": "zgo", "name": "zgo",
"version": "2.1.0", "version": "2.3.1",
"lockfileVersion": 3, "lockfileVersion": 3,
"requires": true, "requires": true,
"packages": { "packages": {
"": { "": {
"name": "zgo", "name": "zgo",
"version": "2.1.0", "version": "2.3.1",
"dependencies": { "dependencies": {
"@angular/animations": "^16.0.0", "@angular/animations": "^16.0.0",
"@angular/cdk": "^16.0.0", "@angular/cdk": "^16.0.0",

View file

@ -136,7 +136,7 @@ export class ViewerComponent implements OnInit {
this.user = user; this.user = user;
//console.log('Viewer loginCheck', this.user); //console.log('Viewer loginCheck', this.user);
if (!this.owner.paid || !this.user.validated) { if (!this.owner.paid || !this.user.validated) {
//console.log('Log in expired!'); // console.log('Log in expired!');
this.router.navigate(['/login']); this.router.navigate(['/login']);
} }
}); });

View file

@ -1,6 +1,14 @@
<!doctype html> <!doctype html>
<html lang="en"> <html lang="en">
<head> <head>
<meta http-equiv="Content-Security-Policy"
content=
"connect-src 'self' https://test.zgo.cash https://zgo.cash ;
default-src 'self';
style-src 'self' https://fonts.googleapis.com 'unsafe-inline' ;
img-src 'self' https://fonts.googleapis.com http://www.w3.org data: ;
font-src 'self' http://www.w3.org https://fonts.gstatic.com https://fonts.gstatic.com ; ">
<meta charset="utf-8"> <meta charset="utf-8">
<title>ZGo - The Zcash Register</title> <title>ZGo - The Zcash Register</title>
<base href="/"> <base href="/">
@ -14,4 +22,4 @@
<body> <body>
<app-root></app-root> <app-root></app-root>
</body> </body>
</html> </html>