lundi 23 septembre 2019

Ember CSP: Change connect-src dynamically

Is there a way to change the connect-src at runtime in ember-cli-content-security-policy?

contentSecurityPolicy: {
            'default-src': "'none'",
            'script-src': "'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com",
            'font-src': "'self' data: use.typekit.net fonts.gstatic.com",
            'img-src': "'self' data: image/png www.google-analytics.com",
            'connect-src': "'self' www.google-analytics.com wss://data-test/ws",
            'style-src': "'self' 'unsafe-inline' http://fonts.googleapis.com",
            'frame-src': "'self' http://test.com/ESTORERIA/Agreement/en/EULA.htm"
        }




Aucun commentaire:

Enregistrer un commentaire