cordova-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From alsoro...@apache.org
Subject spec commit: CB-11098 Allowed media from both http and https in CSP tag
Date Tue, 19 Apr 2016 08:43:20 GMT
Repository: cordova-mobile-spec
Updated Branches:
  refs/heads/master 2c0549a38 -> a6b53c89f


CB-11098 Allowed media from both http and https in CSP tag


Project: http://git-wip-us.apache.org/repos/asf/cordova-mobile-spec/repo
Commit: http://git-wip-us.apache.org/repos/asf/cordova-mobile-spec/commit/a6b53c89
Tree: http://git-wip-us.apache.org/repos/asf/cordova-mobile-spec/tree/a6b53c89
Diff: http://git-wip-us.apache.org/repos/asf/cordova-mobile-spec/diff/a6b53c89

Branch: refs/heads/master
Commit: a6b53c89f31be7a8a69f35693dc5cf8a54fe4b90
Parents: 2c0549a
Author: Alexander Sorokin <alexander.sorokin@akvelon.com>
Authored: Mon Apr 18 22:18:46 2016 +0300
Committer: Alexander Sorokin <alexander.sorokin@akvelon.com>
Committed: Mon Apr 18 22:18:46 2016 +0300

----------------------------------------------------------------------
 www/csp-incl.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/cordova-mobile-spec/blob/a6b53c89/www/csp-incl.js
----------------------------------------------------------------------
diff --git a/www/csp-incl.js b/www/csp-incl.js
index 9967558..8dc5496 100644
--- a/www/csp-incl.js
+++ b/www/csp-incl.js
@@ -52,7 +52,7 @@ if (!window._disableCSP) {
         case 'windows':
             cspMetaContent = 'default-src \'self\' https://ssl.gstatic.com/accessibility/javascript/android/;'
+
                             ' connect-src \'self\' http://cordova-filetransfer.jitsu.com;'
+
-                            ' media-src \'self\' http://cordova.apache.org/downloads/;' +
+                            ' media-src \'self\' http://cordova.apache.org/downloads/ https://cordova.apache.org/downloads/;'
+
                             ' frame-src \'self\' http://stealbridgesecret.test/ data: gap:;'
+
                             ' img-src \'self\' data: cdvfile:;' +
                             ' style-src \'self\' \'unsafe-inline\'';


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org


Mime
View raw message