Skip to content
Permalink
Browse files
Adding google.com to CSP and removing older one
  • Loading branch information
Raghav Katyal committed May 9, 2016
1 parent f642d54 commit ff9f2fa3acce67ccdb211d46ebb3a6d4213a7c5d
Showing 3 changed files with 2 additions and 4 deletions.
@@ -25,7 +25,6 @@
</description>

<access origin="http://audio.ibeat.org" />
<access origin="http://cordova-filetransfer.jitsu.com" />
<access origin="http://whatheaders.com" />
<access origin="http://*.apache.org" />
<access origin="https://*.apache.org" />
@@ -37,7 +36,6 @@
<access origin="httpssss://example.com" />

<allow-navigation href="http://audio.ibeat.org" />
<allow-navigation href="http://cordova-filetransfer.jitsu.com" />
<allow-navigation href="http://whatheaders.com" />
<allow-navigation href="http://*.apache.org" />
<allow-navigation href="https://*.apache.org" />
@@ -100,7 +100,7 @@ exports.defineAutoTests = function () {
});

it("XMLHttpRequest.spec.9 calls onload from successful http get", function (done) {
createXHR("http://google.com", true, done, errorHandler.onError.bind(null, done));
createXHR("http://www.google.com", true, done, errorHandler.onError.bind(null, done));
});

it("XMLHttpRequest.spec.3 should be able to load the current page", function (done) {
@@ -51,7 +51,7 @@ if (!window._disableCSP) {
case 'ios':
case 'windows':
cspMetaContent = 'default-src \'self\' https://ssl.gstatic.com/accessibility/javascript/android/;' +
' connect-src \'self\' http://cordova-filetransfer.jitsu.com;' +
' connect-src \'self\' http://www.google.com;' +
' media-src \'self\' http://cordova.apache.org/downloads/ https://cordova.apache.org/downloads/;' +
' frame-src \'self\' http://stealbridgesecret.test/ data: gap:;' +
' img-src \'self\' data: cdvfile:;' +

0 comments on commit ff9f2fa

Please sign in to comment.