Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ui: CSP Improvements #9847

Merged
merged 4 commits into from
Mar 17, 2021
Merged

ui: CSP Improvements #9847

merged 4 commits into from
Mar 17, 2021

Commits on Mar 8, 2021

  1. Configuration menu
    Copy the full SHA
    811ca87 View commit details
    Browse the repository at this point in the history
  2. Create a fake filesystem using JSON to avoid inline scripts in index

    We used to have inline scripts in index.html in order to support embers
    filepath fingerprinting and our configurable rootURL.
    
    Instead of using inline scripts we use application/json plus a JSON blob
    to create a fake filesystem JSON blob/hash/map to hold all of the
    rootURL'ed fingerprinted file paths which we can then retrive later in
    non-inline scripts.
    
    We move our inlined polyfills script into the init.js external script,
    and we move the CodeMirror syntax highlighting configuration inline
    script into the main app itself - into the already existing CodeMirror
    initializer (this has been moved so we can lookup a service located
    document using ember's DI container)
    John Cowen committed Mar 8, 2021
    Configuration menu
    Copy the full SHA
    695da35 View commit details
    Browse the repository at this point in the history
  3. Set a strict-ish CSP policy during development

    John Cowen committed Mar 8, 2021
    Configuration menu
    Copy the full SHA
    1976703 View commit details
    Browse the repository at this point in the history

Commits on Mar 11, 2021

  1. Changelog

    John Cowen committed Mar 11, 2021
    Configuration menu
    Copy the full SHA
    1af25fa View commit details
    Browse the repository at this point in the history