@forge/csp 3.4.0-next.0 → 3.4.1-next.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,17 @@
|
|
|
1
1
|
# @forge/csp
|
|
2
2
|
|
|
3
|
+
## 3.4.1-next.0
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- 2819919: remove connect-to from csp header as it is no longer used
|
|
8
|
+
|
|
9
|
+
## 3.4.0
|
|
10
|
+
|
|
11
|
+
### Minor Changes
|
|
12
|
+
|
|
13
|
+
- 4fa9673: Update CSP policies to remove the need for customer defined egress for loading avatar images & host media access
|
|
14
|
+
|
|
3
15
|
## 3.4.0-next.0
|
|
4
16
|
|
|
5
17
|
### Minor Changes
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"csp-injection-service.d.ts","sourceRoot":"","sources":["../../src/csp/csp-injection-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,EAAE,UAAU,EAAmB,MAAM,UAAU,CAAC;AAqDvD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,iBAAiB;IAMzB,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,iBAAiB;IA8BlB,gBAAgB;4BAOD,UAAU;mBACnB,iBAAiB;;;;UAI1B,MAAM,EAAE,
|
|
1
|
+
{"version":3,"file":"csp-injection-service.d.ts","sourceRoot":"","sources":["../../src/csp/csp-injection-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,EAAE,UAAU,EAAmB,MAAM,UAAU,CAAC;AAqDvD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,iBAAiB;IAMzB,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,iBAAiB;IA8BlB,gBAAgB;4BAOD,UAAU;mBACnB,iBAAiB;;;;UAI1B,MAAM,EAAE,CA6DV;CACH"}
|
|
@@ -136,7 +136,6 @@ class CSPInjectionService {
|
|
|
136
136
|
this.getForgeGlobalCSP(microsEnv, isFedRAMP),
|
|
137
137
|
...this.getExistingCSPDetails(types_1.ExternalCspType.STYLE_SRC, existingCSPDetails)
|
|
138
138
|
].join(' ');
|
|
139
|
-
const navigateTo = ["'self'"];
|
|
140
139
|
return [
|
|
141
140
|
`default-src ${defaultSrc}`,
|
|
142
141
|
`frame-ancestors ${frameAncestors}`,
|
|
@@ -146,7 +145,6 @@ class CSPInjectionService {
|
|
|
146
145
|
`media-src ${mediaSrc}`,
|
|
147
146
|
`connect-src ${connectSrc}`,
|
|
148
147
|
`script-src ${scriptSrc}`,
|
|
149
|
-
`navigate-to ${navigateTo}`,
|
|
150
148
|
`style-src ${styleSrc}`,
|
|
151
149
|
`form-action 'self'`,
|
|
152
150
|
`sandbox allow-downloads allow-forms allow-modals allow-pointer-lock allow-same-origin allow-scripts`,
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@forge/csp",
|
|
3
|
-
"version": "3.4.
|
|
3
|
+
"version": "3.4.1-next.0",
|
|
4
4
|
"description": "Contains the CSP configuration for Custom UI resources in Forge",
|
|
5
5
|
"main": "out/index.js",
|
|
6
6
|
"author": "Atlassian",
|
|
@@ -11,8 +11,8 @@
|
|
|
11
11
|
"clean": "rm -rf ./out && rm -f tsconfig.tsbuildinfo"
|
|
12
12
|
},
|
|
13
13
|
"devDependencies": {
|
|
14
|
-
"@forge/cli-shared": "6.4.
|
|
15
|
-
"@forge/manifest": "8.0
|
|
14
|
+
"@forge/cli-shared": "6.4.1-next.1",
|
|
15
|
+
"@forge/manifest": "8.2.0-next.1",
|
|
16
16
|
"@types/jest": "^29.5.12",
|
|
17
17
|
"@types/node": "14.18.63"
|
|
18
18
|
},
|