feat: integrate authored nightdrive soundtrack
This commit is contained in:
@@ -48,7 +48,7 @@ export function verifyNoJavaScriptDocument(html) {
|
||||
function verifySecurityHeaders(response, expectedDigest) {
|
||||
requireHeader(response, 'x-portfolio-manifest-digest', expectedDigest);
|
||||
const csp = requireHeader(response, 'content-security-policy', /default-src 'self'/u);
|
||||
for (const directive of ["connect-src 'none'", "object-src 'none'", "base-uri 'none'", "frame-ancestors 'none'", "form-action 'self'", 'upgrade-insecure-requests']) {
|
||||
for (const directive of ["connect-src 'self'", "object-src 'none'", "base-uri 'none'", "frame-ancestors 'none'", "form-action 'self'", 'upgrade-insecure-requests']) {
|
||||
if (!csp.includes(directive)) throw new Error(`Content-Security-Policy lacks ${directive}.`);
|
||||
}
|
||||
if (/unsafe-inline|unsafe-eval|\*/u.test(csp)) throw new Error('Content-Security-Policy contains an unsafe source expression.');
|
||||
|
||||
Reference in New Issue
Block a user