Add *.runkit-embed.com to content security policy in preparation for RunKit embed iframes living on this new domain. (#223)

tolmasky · web-flow · commit 69ccc86863b8 · 2020-04-24T15:40:03.000-07:00
* Add *.runkit-embed.com to content security policy in preparation for RunKit embed iframes living on this new domain. Reviewed by @tolmasky. * Safari and Chrome differ on whether *.runkit-embed.com allows runkit-embed.com. Reviewed by @tolmasky.
diff --git a/_headers b/_headers
@@ -9,6 +9,8 @@ csp:
     'ms-appx-web:',
     'ghbtns.com',
     'runkit.com',
+    '*.runkit-embed.com',
+    'runkit-embed.com',
     'platform.twitter.com'
   ]
   connect-src: [

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,8 @@ csp:`
`9`	`9`	`'ms-appx-web:',`
`10`	`10`	`'ghbtns.com',`
`11`	`11`	`'runkit.com',`
	`12`	`+ '*.runkit-embed.com',`
	`13`	`+ 'runkit-embed.com',`
`12`	`14`	`'platform.twitter.com'`
`13`	`15`	`]`
`14`	`16`	`connect-src: [`