fix(console): static assets, edit csp (#3153)

* fix: static font, icons

* mat icon package

* csp

* lint

* rm csp line
This commit is contained in:
Max Peintner
2022-02-03 07:21:00 +01:00
committed by GitHub
parent 46ff51b631
commit bd2e7d8133
1577 changed files with 12894 additions and 16 deletions

View File

@@ -73,13 +73,9 @@ func csp(zitadelDomain string) *middleware.CSP {
zitadelDomain = "*." + zitadelDomain
}
csp := middleware.DefaultSCP
csp.StyleSrc = csp.StyleSrc.AddInline().AddHost("fonts.googleapis.com").AddHost("maxst.icons8.com") //TODO: host it
csp.FontSrc = csp.FontSrc.AddHost("fonts.gstatic.com").AddHost("maxst.icons8.com") //TODO: host it
csp.StyleSrc = csp.StyleSrc.AddInline()
csp.ScriptSrc = csp.ScriptSrc.AddEval()
csp.ConnectSrc = csp.ConnectSrc.AddHost(zitadelDomain).
AddHost("fonts.googleapis.com").
AddHost("fonts.gstatic.com").
AddHost("maxst.icons8.com") //TODO: host it
csp.ConnectSrc = csp.ConnectSrc.AddHost(zitadelDomain)
csp.ImgSrc = csp.ImgSrc.AddHost(zitadelDomain).AddScheme("blob")
return &csp
}