Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add Content-Security-Policy and other headers to vercel.json #846

Open
wants to merge 14 commits into
base: main
Choose a base branch
from
Open

Add Content-Security-Policy and other headers to vercel.json #846

wants to merge 14 commits into from

Commits on Feb 28, 2024

  1. fix #841 - add Content-Security-Policy and other headers to vercel.json

    @fennifith
    fennifith committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    00220b4 View commit details
    Browse the repository at this point in the history

  2. enable href-container-script through addEventListener rather than usi… 

    …ng event script attrs
    @fennifith
    fennifith committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    53dab06 View commit details
    Browse the repository at this point in the history

  3. update CSP to allow convertkit form-action, allow only inline style a… 

    …ttr sources, etc.
    @fennifith
    fennifith committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    65f3258 View commit details
    Browse the repository at this point in the history

  4. revert style-src to allow unsafe-inline for medium-zoom

    @fennifith
    fennifith committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    af3ca72 View commit details
    Browse the repository at this point in the history

  5. fix convertkit form-action being disallowed due to its redirect response

    @fennifith
    fennifith committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    87f7d0e View commit details
    Browse the repository at this point in the history

  6. fix CSP for inline scripts and vercel's weird comments widget

    @fennifith
    fennifith committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    3d284e1 View commit details
    Browse the repository at this point in the history

  7. revert href-container-script changes now that unsafe-inline is enabled

    @fennifith
    fennifith committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    1a5acc5 View commit details
    Browse the repository at this point in the history

  8. fix build, add Permissions-Policy & Access-Control-Allow-Origin headers

    @fennifith
    fennifith committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    c0c1528 View commit details
    Browse the repository at this point in the history

  9. fix vercel comments widget by turning off CSP header on preview builds

    @fennifith
    fennifith committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    a65e118 View commit details
    Browse the repository at this point in the history

  10. also remove cross-origin-opener-policy to allow login window

    @fennifith
    fennifith committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    968381b View commit details
    Browse the repository at this point in the history

  11. add more lenient CSP/COOP headers for preview

    @fennifith
    fennifith committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    7ff3aa7 View commit details
    Browse the repository at this point in the history

  12. update headers & add documentation

    @fennifith
    fennifith committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    b0c665e View commit details
    Browse the repository at this point in the history

  13. enable href-container-script through addEventListener rather than usi… 

    …ng event script attrs
    @fennifith
    fennifith committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    7b8c5e9 View commit details
    Browse the repository at this point in the history

  14. update FFG to remove inline script attributes

    @fennifith
    fennifith committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    7699916 View commit details
    Browse the repository at this point in the history