From aea032d31c94e81f629c6049e4d1929d9a91ee10 Mon Sep 17 00:00:00 2001 From: James Cobb Date: Tue, 15 Oct 2024 12:21:00 -0600 Subject: [PATCH 1/2] move CSP and add unsafe-inline, remove sha --- _includes/head-csp.html | 24 ++++++++++++++++++++++++ _layouts/base.html | 3 +-- 2 files changed, 25 insertions(+), 2 deletions(-) create mode 100644 _includes/head-csp.html diff --git a/_includes/head-csp.html b/_includes/head-csp.html new file mode 100644 index 00000000000..3e10441bbd8 --- /dev/null +++ b/_includes/head-csp.html @@ -0,0 +1,24 @@ + \ No newline at end of file diff --git a/_layouts/base.html b/_layouts/base.html index 01f4c153e78..7a36f1dbeb0 100755 --- a/_layouts/base.html +++ b/_layouts/base.html @@ -31,8 +31,7 @@ {{ page.title }}{{ page_title_version_suffix }}{% unless page_title_starts_with_quarkus or page_title_ends_with_quarkus %} - Quarkus{% endunless %} - + {% include head-csp.html %} From 656a67dee2f1973c9fa03e95019f024ad954ce37 Mon Sep 17 00:00:00 2001 From: James Cobb Date: Tue, 15 Oct 2024 12:53:47 -0600 Subject: [PATCH 2/2] update adobe url to allow for https --- _includes/head-csp.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_includes/head-csp.html b/_includes/head-csp.html index 3e10441bbd8..96f95b436b0 100644 --- a/_includes/head-csp.html +++ b/_includes/head-csp.html @@ -2,7 +2,7 @@ default-src https://dpm.demdex.net https://route-default-test-mscherer-matamo.apps.ospo-osci.z3b1.p1.openshiftapps.com/ {{ site.search.host }}; script-src 'self' 'unsafe-inline' 'unsafe-eval' {{ search_script }} - assets.adobedtm.com + https://assets.adobedtm.com js.bizographics.com https://www.redhat.com https://static.redhat.com