Sheogorath ecee16bd73 Fix disqus CSP ... Disqus loads it's embed config.js from its root domain (https://disqus.com). Our CSPs only allow subdomains (e.g.: https://codimd.disqus.com). This causes the disqus embedding to fail. This patch should fix this problem by adding https://disqus.com to the CSP setting. From a security perspective there is no real change. Since still the same parties are involved. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>		2018-12-05 13:17:14 +01:00
..
config	Warn on missing serverURL	2018-11-28 14:38:49 +01:00
migrations	Update error message text checks	2018-11-16 23:53:50 +01:00
models	Switch scrypt library to a successor	2018-11-21 01:33:34 +01:00
ot	Fix logging in ot module	2018-11-13 23:30:13 +01:00
web	Merge pull request #1082 from cloudyu/pull	2018-11-28 13:27:38 +01:00
workers	refactor: Remove require extension filename	2017-05-08 19:29:06 +08:00
csp.js	Fix disqus CSP	2018-12-05 13:17:14 +01:00
history.js	Further improvement of error handling for LZString	2018-07-27 15:42:58 +02:00
letter-avatars.js	Fix possible weird objects as email	2018-07-27 13:36:22 +02:00
logger.js	Fix streaming for winston	2018-11-16 11:49:39 +01:00
realtime.js	switching to eslint for code checking	2018-11-14 23:15:36 +01:00
response.js	Disallow creation of robots.txt in freeurl	2018-11-17 13:23:03 +01:00
utils.js	switch to __dirname	2017-06-02 11:34:35 +01:00