From 6970e9228a37c71260360c7f87d37de22173b85c Mon Sep 17 00:00:00 2001 From: Danny Coates Date: Mon, 17 Jul 2017 15:49:09 -0700 Subject: [PATCH] changed CSP quotes --- server/server.js | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/server/server.js b/server/server.js index 1f49eb6b..5bcb3c63 100644 --- a/server/server.js +++ b/server/server.js @@ -35,24 +35,24 @@ app.use(helmet()); app.use( helmet.contentSecurityPolicy({ directives: { - defaultSrc: ['"self"'], + defaultSrc: ["'self'"], connectSrc: [ - '"self"', + "'self'", 'https://sentry.prod.mozaws.net', 'https://www.google-analytics.com', 'https://ssl.google-analytics.com' ], imgSrc: [ - '"self"', + "'self'", 'https://www.google-analytics.com', 'https://ssl.google-analytics.com' ], - scriptSrc: ['"self"', 'https://ssl.google-analytics.com'], - styleSrc: ['"self"', 'https://code.cdn.mozilla.net'], - fontSrc: ['"self"', 'https://code.cdn.mozilla.net'], - formAction: ['"none"'], - frameAncestors: ['"none"'], - objectSrc: ['"none"'] + scriptSrc: ["'self'", 'https://ssl.google-analytics.com'], + styleSrc: ["'self'", 'https://code.cdn.mozilla.net'], + fontSrc: ["'self'", 'https://code.cdn.mozilla.net'], + formAction: ["'none'"], + frameAncestors: ["'none'"], + objectSrc: ["'none'"] } }) );