From b7e5a82f52f23039743bf552ad802a8aa3d0f46d Mon Sep 17 00:00:00 2001 From: Max Wu Date: Thu, 5 Jul 2018 17:35:21 +0800 Subject: [PATCH] Add script src hash for speaker note to CSP directives Signed-off-by: Max Wu --- lib/csp.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/csp.js b/lib/csp.js index a49c748..0987df8 100644 --- a/lib/csp.js +++ b/lib/csp.js @@ -71,7 +71,7 @@ function addInlineScriptExceptions (directives) { directives.scriptSrc.push(getCspNonce) // TODO: This is the SHA-256 hash of the inline script in build/reveal.js/plugins/notes/notes.html // Any more clean solution appreciated. - directives.scriptSrc.push('\'sha256-EtvSSxRwce5cLeFBZbvZvDrTiRoyoXbWWwvEVciM5Ag=\'') + directives.scriptSrc.push('\'sha256-L0TsyAQLAc0koby5DCbFAwFfRs9ZxesA+4xg0QDSrdI=\'') } function getCspNonce (req, res) {