@forge/csp 5.5.0-next.1 → 5.6.0-experimental-0c74a4b
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,51 @@
|
|
|
1
1
|
# @forge/csp
|
|
2
2
|
|
|
3
|
+
## 5.6.0
|
|
4
|
+
|
|
5
|
+
### Minor Changes
|
|
6
|
+
|
|
7
|
+
- 83b3eac: Use public analytics URL
|
|
8
|
+
|
|
9
|
+
### Patch Changes
|
|
10
|
+
|
|
11
|
+
- f995494: Fix CSP for emoji service by updating host URL structure
|
|
12
|
+
- 6077876: Fix analytics domains
|
|
13
|
+
- a91d2de: update content-security-policy-parser to version 0.6.0
|
|
14
|
+
|
|
15
|
+
## 5.6.0-next.3
|
|
16
|
+
|
|
17
|
+
### Patch Changes
|
|
18
|
+
|
|
19
|
+
- a91d2de: update content-security-policy-parser to version 0.6.0
|
|
20
|
+
|
|
21
|
+
## 5.6.0-next.2
|
|
22
|
+
|
|
23
|
+
### Patch Changes
|
|
24
|
+
|
|
25
|
+
- f995494: Fix CSP for emoji service by updating host URL structure
|
|
26
|
+
|
|
27
|
+
## 5.6.0-next.1
|
|
28
|
+
|
|
29
|
+
### Patch Changes
|
|
30
|
+
|
|
31
|
+
- 6077876: Fix analytics domains
|
|
32
|
+
|
|
33
|
+
## 5.6.0-next.0
|
|
34
|
+
|
|
35
|
+
### Minor Changes
|
|
36
|
+
|
|
37
|
+
- 83b3eac: Use public analytics URL
|
|
38
|
+
|
|
39
|
+
## 5.5.0
|
|
40
|
+
|
|
41
|
+
### Minor Changes
|
|
42
|
+
|
|
43
|
+
- cd25766: Add gasv3 analytics domains
|
|
44
|
+
|
|
45
|
+
### Patch Changes
|
|
46
|
+
|
|
47
|
+
- ddc6274: Add localhost to frameAncestors in prod when passed in appContext
|
|
48
|
+
|
|
3
49
|
## 5.5.0-next.1
|
|
4
50
|
|
|
5
51
|
### Patch Changes
|
|
@@ -34,12 +34,12 @@ const ATLASSIAN_HOST = {
|
|
|
34
34
|
...makeICHosts((env, icOptions) => `https://media-api.${getICDomain(env, icOptions)}`)
|
|
35
35
|
},
|
|
36
36
|
ATLASSIAN_ANALYTICS_GATEWAY_HOST: {
|
|
37
|
-
dev: 'https://as
|
|
38
|
-
stg: 'https://as
|
|
39
|
-
prod: 'https://as
|
|
40
|
-
'fedramp-stg': 'https://as
|
|
41
|
-
'fedramp-prod': 'https://as
|
|
42
|
-
...makeICHosts((env, icOptions) => `https://as
|
|
37
|
+
dev: 'https://as.dev.atl-paas.net',
|
|
38
|
+
stg: 'https://as.staging.atl-paas.net',
|
|
39
|
+
prod: 'https://as.atlassian.com',
|
|
40
|
+
'fedramp-stg': 'https://as.stg.atlassian-us-gov-mod.com',
|
|
41
|
+
'fedramp-prod': 'https://as.atlassian-us-gov-mod.com',
|
|
42
|
+
...makeICHosts((env, icOptions) => `https://as.${getICDomain(env, icOptions)}`)
|
|
43
43
|
},
|
|
44
44
|
ATLASSIAN_AVATAR_HOST: {
|
|
45
45
|
dev: 'avatar-management--avatars.us-west-2.staging.public.atl-paas.net',
|
|
@@ -72,7 +72,7 @@ const ATLASSIAN_HOST = {
|
|
|
72
72
|
prod: 'https://pf-emoji-service--cdn.us-east-1.prod.public.atl-paas.net',
|
|
73
73
|
'fedramp-stg': 'https://pf-emoji-service--cdn.us-east-1.staging.cdn.atlassian-us-gov-mod.com',
|
|
74
74
|
'fedramp-prod': 'https://pf-emoji-service--cdn.us-east-1.prod.cdn.atlassian-us-gov-mod.com',
|
|
75
|
-
...makeICHosts((env, icOptions) => `https://pf-emoji-service.${getICDomain(env, icOptions)}`)
|
|
75
|
+
...makeICHosts((env, icOptions) => `https://pf-emoji-service.services.${getICDomain(env, icOptions)}`)
|
|
76
76
|
},
|
|
77
77
|
ATLASSIAN_FOP_GE_HOST: {
|
|
78
78
|
dev: 'https://forge-outbound-proxy.dev.services.atlassian.com',
|
|
@@ -140,7 +140,7 @@ class CSPProcessingService {
|
|
|
140
140
|
this.logger.info('discarding potentially-malicious CSP');
|
|
141
141
|
return {};
|
|
142
142
|
}
|
|
143
|
-
return (0, content_security_policy_parser_1.default)(cspContent);
|
|
143
|
+
return Object.fromEntries((0, content_security_policy_parser_1.default)(cspContent));
|
|
144
144
|
}
|
|
145
145
|
}
|
|
146
146
|
exports.CSPProcessingService = CSPProcessingService;
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@forge/csp",
|
|
3
|
-
"version": "5.
|
|
3
|
+
"version": "5.6.0-experimental-0c74a4b",
|
|
4
4
|
"description": "Contains the CSP configuration for Custom UI resources in Forge",
|
|
5
5
|
"main": "out/index.js",
|
|
6
6
|
"author": "Atlassian",
|
|
@@ -11,14 +11,14 @@
|
|
|
11
11
|
"clean": "rm -rf ./out && rm -f tsconfig.tsbuildinfo"
|
|
12
12
|
},
|
|
13
13
|
"devDependencies": {
|
|
14
|
-
"@forge/cli-shared": "8.
|
|
15
|
-
"@forge/manifest": "11.
|
|
14
|
+
"@forge/cli-shared": "8.12.1-next.1-experimental-0c74a4b",
|
|
15
|
+
"@forge/manifest": "11.3.1-next.1-experimental-0c74a4b",
|
|
16
16
|
"@types/jest": "^29.5.14",
|
|
17
17
|
"@types/node": "20.19.1",
|
|
18
18
|
"cheerio": "^1.1.0"
|
|
19
19
|
},
|
|
20
20
|
"dependencies": {
|
|
21
|
-
"content-security-policy-parser": "^0.
|
|
21
|
+
"content-security-policy-parser": "^0.6.0"
|
|
22
22
|
},
|
|
23
23
|
"peerDependencies": {
|
|
24
24
|
"cheerio": "^1.1.0"
|