jake/jarv.is
1
Fork 0
mirror of https://github.com/jakejarvis/jarv.is.git synced 2026-09-11 01:45:34 -04:00
Code Issues Activity

fix some CSP vs AMP errors

Browse Source
This commit is contained in:
jake
2020-11-28 11:46:39 -05:00
parent aa2c1e60ea
commit 9f32e8ba3f
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
layouts/shortcodes/codepen.amp.html
+2 -1
View File
@@ -3,5 +3,6 @@
width="1200" width="1200"
height="{{ with .Get "height" }}{{ . }}{{ else }}500{{ end }}" height="{{ with .Get "height" }}{{ . }}{{ else }}500{{ end }}"
scrolling="no" scrolling="no"
src="https://codepen.io/{{ .Get "username" }}/embed/{{ .Get "id" }}/?theme-id=light&default-tab={{ .Get "left-tab" }}{{ with .Get "right-tab" }},{{ . }}{{ end }}"> src="https://codepen.io/{{ .Get "username" }}/embed/{{ .Get "id" }}/?theme-id=light&default-tab={{ .Get "left-tab" }}{{ with .Get "right-tab" }},{{ . }}{{ end }}"
sandbox="allow-scripts allow-same-origin allow-popups">
</amp-iframe> </amp-iframe>
netlify.toml
+3 -3
View File
@@ -117,16 +117,16 @@
# https://amp.dev/documentation/guides-and-tutorials/optimize-and-measure/secure-pages/ # https://amp.dev/documentation/guides-and-tutorials/optimize-and-measure/secure-pages/
Content-Security-Policy = ''' Content-Security-Policy = '''
default-src 'self'; default-src 'self';
connect-src 'self' https://api.github.com https://csp-collector.appspot.com/csp/amp https://platform.twitter.com https://queue.simpleanalyticscdn.com; connect-src 'self' https://*.ampproject.net https://csp-collector.appspot.com/csp/amp https://api.github.com https://queue.simpleanalyticscdn.com https://platform.twitter.com;
font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com;
form-action 'none'; form-action 'none';
frame-ancestors 'self'; frame-ancestors 'self';
frame-src 'self' https://buttons.github.io https://cdn.ampproject.org https://codepen.io https://jakejarvis.github.io https://platform.twitter.com https://player.vimeo.com https://simpleanalytics.com https://www.youtube-nocookie.com; frame-src 'self' https://jakejarvis.github.io https://*.ampproject.net https://cdn.ampproject.org https://buttons.github.io https://codepen.io https://cdpn.io https://platform.twitter.com https://player.vimeo.com https://simpleanalytics.com https://www.youtube-nocookie.com;
img-src 'self' data: https:; img-src 'self' data: https:;
manifest-src 'self'; manifest-src 'self';
media-src 'self' data: https:; media-src 'self' data: https:;
object-src 'none'; object-src 'none';
script-src 'self' https://buttons.github.io https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/ https://cdn.ampproject.org/rtv/ https://gist.github.com https://platform.twitter.com https://player.vimeo.com https://scripts.simpleanalyticscdn.com https://syndication.twitter.com; script-src 'self' https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/ https://cdn.ampproject.org/rtv/ https://3p.ampproject.net https://buttons.github.io https://scripts.simpleanalyticscdn.com https://gist.github.com https://syndication.twitter.com https://platform.twitter.com https://player.vimeo.com;
style-src 'self' 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://fonts.googleapis.com https://github.githubassets.com; style-src 'self' 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://fonts.googleapis.com https://github.githubassets.com;
worker-src 'self'; worker-src 'self';
block-all-mixed-content; block-all-mixed-content;