summaryrefslogtreecommitdiff
path: root/lib/csp.js
diff options
context:
space:
mode:
authorSheogorath2020-02-01 12:50:07 +0100
committerSheogorath2020-02-01 12:53:15 +0100
commitb3d4cdbcebe1690bf5211d778ff6f8a0f9f5e518 (patch)
tree7c8b96b02a11f8c317bbf29e775497e21992eaf4 /lib/csp.js
parentc9e66c0385afe55fcc140cc815d876982358f48e (diff)
Update RevealJS to version 3.9.2
This update of revealJS helps us to get rid of the headjs depedency integration using webpack. It updates reveal.js to 3.9.2 and updates the csp hash accordingly for using the slide mode. Background for this update is the critical security vulnerability described by snyk in their disclosure: https://snyk.io/vuln/SNYK-JS-REVEALJS-543841 Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
Diffstat (limited to 'lib/csp.js')
-rw-r--r--lib/csp.js2
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/csp.js b/lib/csp.js
index 94e78d02..fe8bea01 100644
--- a/lib/csp.js
+++ b/lib/csp.js
@@ -71,7 +71,7 @@ function addInlineScriptExceptions (directives) {
directives.scriptSrc.push(getCspNonce)
// TODO: This is the SHA-256 hash of the inline script in build/reveal.js/plugins/notes/notes.html
// Any more clean solution appreciated.
- directives.scriptSrc.push('\'sha256-Lc+VnBdinzYTTAkFrIoUqdoA9EQFeS1AF9ybmF+LLfM=\'')
+ directives.scriptSrc.push('\'sha256-81acLZNZISnyGYZrSuoYhpzwDTTxi7vC1YM4uNxqWaM=\'')
}
function getCspNonce (req, res) {