jake/jarv.is
1
Fork 0
mirror of https://github.com/jakejarvis/jarv.is.git synced 2025-10-28 15:25:46 -04:00
Code Issues Activity

CSP script oopsie-poopsies

Browse Source
This commit is contained in:
Jake Jarvis
2018-04-26 20:30:09 -04:00
parent e54a358b8d
commit 49e143c5dd
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
firebase.json
View File

@@ -38,7 +38,7 @@
},
{
"key": "Content-Security-Policy",
"value": "default-src 'self'; script-src 'self' 'unsafe-inline' https://www.google-analytics.com https://ssl.google-analytics.com https://ajax.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.youtube.com https://drive.google.com https://www.scribd.com; connect-src 'self' https://jakejarvis.report-uri.com; report-uri https://jakejarvis.report-uri.com/r/d/csp/enforce;"
"value": "default-src 'self'; script-src 'self' www.google-analytics.com ssl.google-analytics.com ajax.googleapis.com 'sha256-KhRmfxEAAaZsUM+7gtG8pxaii136UceZCbgie95aRd0=' 'sha256-C84Lc+r0cDvAfbbr1KHi0s1jt0nzfAWH5+bmB/2Ph8s='; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' fonts.gstatic.com; frame-src 'self' www.youtube.com player.vimeo.com drive.google.com www.scribd.com; connect-src 'self' jakejarvis.report-uri.com www.google-analytics.com ssl.google-analytics.com; upgrade-insecure-requests; report-uri https://jakejarvis.report-uri.com/r/d/csp/enforce;"
},
{
"key": "Expect-CT",

4
public/index.html
View File

@@ -66,13 +66,13 @@
<a href="https://web.archive.org/web/20090605063347/http://www.contentnext.com:80/econaffinity/list/top-10-kids-in-tech/P4" id="news-7" target="_blank" rel="noopener noreferrer nofollow">outlets</a>. <!-- http://paidcontent.org/article/419-our-list-fresh-faces-in-tech-10-kid-entrepreneurs-to-watch/ -->
</p>
<p>I've been <a href="https://profiles.udacity.com/u/jakejarvis" id="udacity" target="_blank" rel="noopener noreferrer nofollow">spending my free time</a> <a href="https://app.pluralsight.com/profile/jakejarvis" id="pluralsight" target="_blank" rel="noopener noreferrer nofollow">dipping my toes</a> into the waters of <a href="https://mchow01.github.io/security/2015/09/14/learning-more-about-security.html" id="infosec" target="_blank" rel="noopener noreferrer nofollow">information security</a> and <a href="https://martinfowler.com/articles/serverless.html" id="serverless" target="_blank" rel="noopener noreferrer nofollow">serverless cloud architecture</a>, especially the <a href="https://medium.com/google-cloud/a-survival-guide-for-containerizing-your-infrastructure-part-1-why-switch-8e8dee9fc66" id="containerization" target="_blank" rel="noopener noreferrer nofollow">containerization of everything</a>.</p>
<p>If any of this fits with what you're looking for, I'd love to hear from you via <a href="https://www.google.com/recaptcha/mailhide/d?k=01ZzhlmsGArcg71LQvaD9fPA==&amp;c=qY-Y4H2c3dNzvkLjmkK-DiOt8wwynhvZK2GFaGP1pSQ=" onclick="window.open('https://www.google.com/recaptcha/mailhide/d?k\x3d01ZzhlmsGArcg71LQvaD9fPA\x3d\x3d\x26c\x3dqY-Y4H2c3dNzvkLjmkK-DiOt8wwynhvZK2GFaGP1pSQ\x3d', '', 'toolbar=0,scrollbars=0,location=0,statusbar=0,menubar=0,resizable=0,width=500,height=300'); return false;" id="email">email</a><sup><a href="https://keybase.io/jakejarvis/pgp_keys.asc?fingerprint=87fb4b6006dd1beb3ed47fabd36cb66f4002b25b" id="pgp" target="_blank" rel="noopener noreferrer nofollow">D36C B66F 4002 B25B</a></sup>, <a href="https://twitter.com/messages/compose?recipient_id=229769022" class="twitter" target="_blank" rel="noopener noreferrer nofollow">DM</a>, or <a href="sms:+1-908-444-6655" id="sms">text</a>!</p>
<p>If any of this fits with what you're looking for, I'd love to hear from you via <a href="&#109;&#97;&#105;&#108;&#116;&#111;&#58;&#106;&#97;&#107;&#101;&#106;&#97;&#114;&#118;&#105;&#115;&#64;&#103;&#109;&#97;&#105;&#108;&#46;&#99;&#111;&#109;" id="email">email</a><sup><a href="https://keybase.io/jakejarvis/pgp_keys.asc?fingerprint=87fb4b6006dd1beb3ed47fabd36cb66f4002b25b" id="pgp" target="_blank" rel="noopener noreferrer nofollow">D36C B66F 4002 B25B</a></sup>, <a href="https://twitter.com/messages/compose?recipient_id=229769022" class="twitter" target="_blank" rel="noopener noreferrer nofollow">DM</a>, or <a href="sms:+1-908-444-6655" id="sms">text</a>!</p>
<p id="copyright"><a href="https://web.archive.org/web/*/jakejarvis.com" id="wayback" target="_blank" rel="noopener noreferrer nofollow">&copy; 1999 &ndash;</a> 2018 Jake Jarvis. <span>&#x1F43C;</span> <a href="https://github.com/jakejarvis/jakejarvis.com" id="source" target="_blank" rel="noopener noreferrer nofollow">View source on GitHub.</a></p>
</div>
<script>
window.ga=function(){ga.q.push(arguments)};ga.q=[];ga.l=+new Date;
ga('create','UA-1563964-4','auto');
ga('send','pageview')
ga('send','pageview');
</script>
<script src="https://www.google-analytics.com/analytics.js" async defer></script>
</body>