diff options
| author | Sheogorath | 2018-03-30 16:33:32 +0200 |
|---|---|---|
| committer | Sheogorath | 2018-03-30 16:33:52 +0200 |
| commit | d939de17df08b7a2ff8302869981f4fc88566cd9 (patch) | |
| tree | 928502f8fef68664f43a8f2443c50de745312d18 /lib/config/default.js | |
| parent | d2cce7638a78ca7616607217b179c15915452058 (diff) | |
Fix CSP for disqus and Google Analytics
This commit should fix existing problems with Disqus and Google
Analytics enabled in the meta-yaml section of a note.
Before this commit they were blocked by the strict CSP. It's still
possible to disable the added directives using `addDisqus` and
`addGoogleAnalytics` in the `csp` config section.
They are enabled by default to prevent breaking changes.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
Diffstat (limited to 'lib/config/default.js')
| -rw-r--r-- | lib/config/default.js | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/config/default.js b/lib/config/default.js index b6f1af17..68849d36 100644 --- a/lib/config/default.js +++ b/lib/config/default.js @@ -18,6 +18,8 @@ module.exports = { directives: { }, addDefaults: true, + addDisqus: true, + addGoogleAnalytics: true, upgradeInsecureRequests: 'auto', reportURI: undefined }, |