Compare commits

..

8 Commits

Author SHA1 Message Date
timvisee
eb3a9e8c89 Bump version to 3.4.9 2021-04-21 21:52:18 +02:00
timvisee
6c3ac403f6 Update dependencies 2021-04-21 21:51:12 +02:00
timvisee
1ce2a60dd5 Merge branch 'whalehub-patch-1' into master
https://github.com/timvisee/send/pull/19
2021-04-21 21:49:21 +02:00
Aaron
f5bb74e921 index.js: Add "data:" as an allowed image source in CSP
Signed-off-by: Aaron <admin@datahoarder.dev>
2021-04-21 21:40:15 +02:00
timvisee
352fba6302 Update dependencies 2021-04-20 20:37:16 +02:00
timvisee
ace2aa5d73 Merge branch 'dependabot/npm_and_yarn/ssri-6.0.2' into master
See https://github.com/timvisee/send/pull/18
2021-04-20 20:36:17 +02:00
timvisee
3256b01276 Merge branch 'master' into dependabot/npm_and_yarn/ssri-6.0.2
See https://github.com/timvisee/send/pull/18
2021-04-20 20:35:35 +02:00
dependabot[bot]
32539e58ac Bump ssri from 6.0.1 to 6.0.2
Bumps [ssri](https://github.com/npm/ssri) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/npm/ssri/releases)
- [Changelog](https://github.com/npm/ssri/blob/v6.0.2/CHANGELOG.md)
- [Commits](https://github.com/npm/ssri/compare/v6.0.1...v6.0.2)

Signed-off-by: dependabot[bot] <support@github.com>
2021-04-18 09:33:53 +00:00
3 changed files with 10 additions and 10 deletions

14
package-lock.json generated
View File

@@ -1,6 +1,6 @@
{
"name": "send",
"version": "3.4.8",
"version": "3.4.9",
"lockfileVersion": 1,
"requires": true,
"dependencies": {
@@ -4280,9 +4280,9 @@
}
},
"aws-sdk": {
"version": "2.889.0",
"resolved": "https://registry.npmjs.org/aws-sdk/-/aws-sdk-2.889.0.tgz",
"integrity": "sha512-+v77GmIJKXT3GMDg/HF9x8c7RSVU8Imfp/0n0Tuzf5AAE6eavpD3xzHABiK9zO9f+T8XzJDytl66UQ33YXavng==",
"version": "2.890.0",
"resolved": "https://registry.npmjs.org/aws-sdk/-/aws-sdk-2.890.0.tgz",
"integrity": "sha512-39rVXw0aJVnBpVSbZ6ZBaNop8VwkNKx9n+auxQdNnAJtJ9dftgWo4AZYXg0a5lMxIL7AmnlPXWAVPOWHvCeuJg==",
"requires": {
"buffer": "4.9.2",
"events": "1.1.1",
@@ -17750,9 +17750,9 @@
"dev": true
},
"ssri": {
"version": "6.0.1",
"resolved": "https://registry.npmjs.org/ssri/-/ssri-6.0.1.tgz",
"integrity": "sha512-3Wge10hNcT1Kur4PDFwEieXSCMCJs/7WvSACcrMYrNp+b8kDL1/0wJch5Ni2WrtwEa2IO8OsVfeKIciKCDx/QA==",
"version": "6.0.2",
"resolved": "https://registry.npmjs.org/ssri/-/ssri-6.0.2.tgz",
"integrity": "sha512-cepbSq/neFK7xB6A50KHN0xHDotYzq58wWCa5LeWqnPrHG8GzfEjO/4O8kpmcGW+oaxkvhEJCWgbgNk4/ZV93Q==",
"dev": true,
"requires": {
"figgy-pudding": "^3.5.1"

View File

@@ -1,7 +1,7 @@
{
"name": "send",
"description": "File Sharing Experiment",
"version": "3.4.8",
"version": "3.4.9",
"author": "Mozilla (https://mozilla.org)",
"contributors": [
"Tim Visee <3a4fb3964f@sinenomine.email> (https://timvisee.com)"
@@ -137,7 +137,7 @@
"@fluent/langneg": "^0.3.0",
"@google-cloud/storage": "^5.8.4",
"@sentry/node": "^5.30.0",
"aws-sdk": "^2.889.0",
"aws-sdk": "^2.890.0",
"body-parser": "^1.19.0",
"choo": "^7.0.0",
"cldr-core": "^35.1.0",

View File

@@ -38,7 +38,7 @@ module.exports = function(app) {
"'self'",
config.base_url.replace(/^https:\/\//, 'wss://')
],
imgSrc: ["'self'"],
imgSrc: ["'self'", "data:"],
scriptSrc: [
"'self'",
function(req) {