Merge pull request #890 from hackmdio/fix-csp-for-speaker-notes

SISheogorath · web-flow · commit 429257880b4e · 2018-07-05T12:54:07.000+02:00
Replaces script src hash for speaker note to CSP directives
diff --git a/lib/csp.js b/lib/csp.js
@@ -71,7 +71,7 @@ function addInlineScriptExceptions (directives) {
   directives.scriptSrc.push(getCspNonce)
   // TODO: This is the SHA-256 hash of the inline script in build/reveal.js/plugins/notes/notes.html
   // Any more clean solution appreciated.
-  directives.scriptSrc.push('\'sha256-EtvSSxRwce5cLeFBZbvZvDrTiRoyoXbWWwvEVciM5Ag=\'')
+  directives.scriptSrc.push('\'sha256-L0TsyAQLAc0koby5DCbFAwFfRs9ZxesA+4xg0QDSrdI=\'')
 }
 
 function getCspNonce (req, res) {

Original file line number	Diff line number	Diff line change
`@@ -71,7 +71,7 @@ function addInlineScriptExceptions (directives) {`
`71`	`71`	`directives.scriptSrc.push(getCspNonce)`
`72`	`72`	`// TODO: This is the SHA-256 hash of the inline script in build/reveal.js/plugins/notes/notes.html`
`73`	`73`	`// Any more clean solution appreciated.`
`74`		`- directives.scriptSrc.push('\'sha256-EtvSSxRwce5cLeFBZbvZvDrTiRoyoXbWWwvEVciM5Ag=\'')`
	`74`	`+ directives.scriptSrc.push('\'sha256-L0TsyAQLAc0koby5DCbFAwFfRs9ZxesA+4xg0QDSrdI=\'')`
`75`	`75`	`}`
`76`	`76`
`77`	`77`	`function getCspNonce (req, res) {`