techhub/mastodon
2
0
Fork 0
Code Activity

Add subresource integrity for JS and CSS assets (#15096)

Browse Source 
Fix #2744
This commit is contained in:
Eugen Rochko
2020-11-06 11:56:31 +01:00
committed by GitHub
parent 68d4b2b83e
commit 9b1f2a4b61
31 changed files with 79 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/views/layouts/embedded.html.haml
View File

@@ -11,8 +11,8 @@
- if storage_host?
%link{ rel: 'dns-prefetch', href: storage_host }/
= stylesheet_pack_tag 'common', media: 'all'
= stylesheet_pack_tag Setting.default_settings['theme'], media: 'all'
= stylesheet_pack_tag 'common', media: 'all', crossorigin: 'anonymous'
= stylesheet_pack_tag Setting.default_settings['theme'], media: 'all', crossorigin: 'anonymous'
= javascript_pack_tag 'common', integrity: true, crossorigin: 'anonymous'
= javascript_pack_tag "locale_#{I18n.locale}", integrity: true, crossorigin: 'anonymous'
= render_initial_state