github/meteor
1
1
Fork 0
mirror of https://github.com/meteor/meteor.git synced 2026-05-02 03:01:46 -04:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #5141 from brianlukoff/devel

Browse Source 
Add methods of the form BrowserPolicy.content.allow<ContentType>BlobUrl() to BrowserPolicy
This commit is contained in:
Zoltan Olah
2016-02-25 13:54:30 -08:00
parent 1640fc1c99 d25943418a
commit 1928322649
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
packages/browser-policy-content/browser-policy-content.js
View File

@@ -255,6 +255,7 @@ _.each(["script", "object", "img", "media",
var allowMethodName = "allow" + methodResource + "Origin";
var disallowMethodName = "disallow" + methodResource;
var allowDataMethodName = "allow" + methodResource + "DataUrl";
var allowBlobMethodName = "allow" + methodResource + "BlobUrl";
var allowSelfMethodName = "allow" + methodResource + "SameOrigin";
var disallow = function () {
@@ -278,6 +279,10 @@ _.each(["script", "object", "img", "media",
prepareForCspDirective(directive);
cspSrcs[directive].push("data:");
};
BrowserPolicy.content[allowBlobMethodName] = function () {
prepareForCspDirective(directive);
cspSrcs[directive].push("blob:");
};
BrowserPolicy.content[allowSelfMethodName] = function () {
prepareForCspDirective(directive);
cspSrcs[directive].push(keywords.self);