regalijan/car-crushers-portal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove CSP for now, will not work because of react bug

Browse Source
This commit is contained in:
regalijan 2023-10-19 16:50:24 -04:00
parent 13b02c39a0
commit 72884ee715
Signed by: regalijan
GPG Key ID: 5D4196DA269EF520
2 changed files with 3 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
app/root.tsx
View File

@ -157,20 +157,17 @@ function getMarkup(
<div className="App">
<Navigation {...loaderData} />
{children}
<Scripts nonce={loaderData.nonce} />
<Scripts />
</div>
</ChakraProvider>
</StrictMode>
);
return (
<html
data-theme={loaderData.theme}
lang="en-US"
>
<html data-theme={loaderData.theme} lang="en-US">
<head>
<Links />
<style nonce={loaderData.nonce}>
<style>
{`
:root {
color-scheme: ${loaderData.theme};
@ -180,7 +177,6 @@ function getMarkup(
{serverStyleData?.map(({ key, ids, css }) => (
<style
key={key}
nonce={loaderData.nonce}
data-emotion={`${key} ${ids.join(" ")}`}
dangerouslySetInnerHTML={{ __html: css }}
/>

7
functions/_middleware.ts
View File

@ -86,10 +86,7 @@ async function setBody(context: RequestContext) {
}
async function setHeaders(context: RequestContext) {
const nonce = crypto.randomUUID().replaceAll("-", "");
context.data.nonce = nonce;
const response = await context.next();
const rtvValues = [
"Aldaria",
"Altadena",
@ -104,10 +101,6 @@ async function setHeaders(context: RequestContext) {
"Wintervale",
];
response.headers.set(
"Content-Security-Policy",
`connect-src https://o1071757.ingest.sentry.io https://storage.googleapis.com 'self'; default-src 'self'; frame-src https://challenges.cloudflare.com; img-src https://cdn.discordapp.com https://mediaproxy.carcrushers.cc 'self'; media-src https://mediaproxy.carcrushers.cc; report-uri https://o1071757.ingest.sentry.io/api/6069431/security/?sentry_key=3d2b34700e6942f9b739cd8b2001f70f; script-src https://challenges.cloudflare.com nonce-${nonce} 'self'; style-src nonce-${nonce} 'self'`,
);
response.headers.set("Permissions-Policy", "clipboard-write=(self)");
response.headers.set("Referrer-Policy", "same-origin");
response.headers.set(