fix CSP connect-src

david-fong · Nov 8, 2020 · 4694763 · 4694763
1 parent 79ba536
commit 4694763
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 4 deletions.
diff --git a/client/index.html b/client/index.html
@@ -1,4 +1,5 @@
-<!doctype html><html lang="en"><head><title>snakey3</title><meta name="author" content="David Fong"/><meta name="description" content="A multiplayer typing game for learning written languages."/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="referrer" content="same-origin"/><meta charset="UTF-8"/><meta http-equiv="Content-Security-Policy" content="child-src 'none'; object-src 'none'; base-uri 'none'; connect-src 'self' snakey3.herokuapp.com;"/><link rel="icon" href="./favicon.png"><link href="./_barrel.css" rel="stylesheet"><meta name="og:title" content="snakey3"/><meta name="og:description" content="A multiplayer typing game for learning written languages."/><meta name="og:image" content="https://raw.githubusercontent.com/david-fong/snakey3/dev/assets/images/screenshots/snakey_version3_blanktitle.png"/><link rel="prefetch" as="script" id="socket.io-preload" href="./vendor/socket.io.js"/><link rel="preload" as="script" href="./index.js"/></head><body class="fill-parent"><datalist id="public-game-hosts-list"><option value="snakey3.herokuapp.com"></option></datalist><script>{ // Load up last used colour scheme (or default):
+<!doctype html><html lang="en"><head><title>snakey3</title><meta name="author" content="David Fong"/><meta name="description" content="A multiplayer typing game for learning written languages."/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="referrer" content="same-origin"/><meta charset="UTF-8"/><meta http-equiv="Content-Security-Policy" content="default-src 'self' 'unsafe-inline' 'unsafe-eval'; child-src 'none'; object-src 'none'; base-uri 'none'; connect-src 'self' wss://snakey3.herokuapp.com/socket.io/;"/><link rel="icon" href="./favicon.png"><link href="./_barrel.css" rel="stylesheet"><meta name="og:title" content="snakey3"/><meta name="og:description" content="A multiplayer typing game for learning written languages."/><meta name="og:image" content="https://raw.githubusercontent.com/david-fong/snakey3/dev/assets/images/screenshots/snakey_version3_blanktitle.png"/><link rel="prefetch" as="script" id="socket.io-preload" href="./vendor/socket.io.js"/><link rel="preload" as="script" href="./index.js"/></head><body class="fill-parent"><datalist id="public-game-hosts-list"><option value="https://snakey3.herokuapp.com"></option></datalist><script>// TODO.build move to separate file and remove CSP 'unsafe-inline'
+        { // Load up last used colour scheme (or default):
             const cssl = JSON.parse(localStorage.getItem("colourSchemeStyleLiteral"));
             const root = document.documentElement;
             if (cssl) { root.setAttribute("style", cssl); }

diff --git a/client/index.js b/client/index.js
diff --git a/client/index.js.map b/client/index.js.map
diff --git a/package.json b/package.json
@@ -21,7 +21,7 @@
     "typing",
     "game"
   ],
-  "version": "0.8.0",
+  "version": "0.8.1",
   "dependencies": {
     "express": "^4.17.1",
     "socket.io": "^3.0.0",