Beginning of Strict CSP Compliance (#6841)

* Add CSP Support and enable it initially for Login page * Update README * Make sure that CSP is not enabled if CSP_POLICY isnt set * Add a new value for x-csp header that tells if instance has opted-in to CSP or not * Add more src to CSP * Fix typo in header name * Remove duplicate headers fn * Add https://eu.ui-avatars.com/api/ * Add CSP_POLICY to env.example
2023-02-06 22:50:08 +00:00
parent 390967990a
commit 30c0e6d1d7
14 changed files with 243 additions and 58 deletions
@@ -19,7 +19,6 @@ declare global {
    resetEmbedStatus: () => void;
    getEmbedNamespace: () => string | null;
    getEmbedTheme: () => "dark" | "light" | null;
-    isPageOptimizedForEmbed: (calLink: string) => boolean;
  }
 }