From 50eca684345fded6f792bfe331cc66be863d8769 Mon Sep 17 00:00:00 2001
From: sD <stoned@derpymail.org>
Date: Sun, 15 Mar 2020 03:49:48 +0100
Subject: add content policy and make wasabi use https

---
 webAO/client.html | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'webAO/client.html')

diff --git a/webAO/client.html b/webAO/client.html
index 4637d69..ee18cbd 100644
--- a/webAO/client.html
+++ b/webAO/client.html
@@ -5,6 +5,12 @@
 	<title>Attorney Online session</title>
 	<meta charset="utf-8">
 	<meta name="viewport" content="width=device-width, initial-scale=1.0">
+
+	<meta http-equiv="Content-Security-Policy"      content="default-src 'self' 'unsafe-inline' 'unsafe-eval' file: data: ws: *.aceattorneyonline.com https://s3.wasabisys.com https://webao.animatedchatroom.net https://golden-layout.com https://ajax.googleapis.com;">
+    <meta http-equiv="X-Content-Security-Policy"    content="default-src 'self' 'unsafe-inline' 'unsafe-eval' file: data: ws: *.aceattorneyonline.com https://s3.wasabisys.com https://webao.animatedchatroom.net https://golden-layout.com https://ajax.googleapis.com;">
+    <meta http-equiv="X-WebKit-CSP"                 content="default-src 'self' 'unsafe-inline' 'unsafe-eval' file: data: ws: *.aceattorneyonline.com https://s3.wasabisys.com https://webao.animatedchatroom.net https://golden-layout.com https://ajax.googleapis.com;">
+
+
 	<link rel="stylesheet" type="text/css" href="styles/client.css?v=1.0.0" id="client_stylesheet">
 	<link rel="stylesheet" type="text/css" href="styles/default.css?v=1.0.0" id="client_theme">
 	<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
-- 
cgit