From 8439baeb218cc945d23c16bbed04dff526acd90b Mon Sep 17 00:00:00 2001
From: Harsh Shandilya <me@msfjarvis.dev>
Date: Sat, 19 Dec 2020 12:04:57 +0530
Subject: [PATCH] workers-site: update CSP [staging]

Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
---
 themes/ezhil/layouts/partials/footer.html | 2 +-
 workers-site/src/handler.ts               | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/themes/ezhil/layouts/partials/footer.html b/themes/ezhil/layouts/partials/footer.html
index 1841def..15e6196 100644
--- a/themes/ezhil/layouts/partials/footer.html
+++ b/themes/ezhil/layouts/partials/footer.html
@@ -8,5 +8,5 @@
 {{ template "_internal/google_analytics_async.html" . }}
 {{ end }}
 {{- with .Site.Params.Social -}}
-<script>feather.replace()</script>
+<script nonce="MZSWC5DVOJSS23TPNZRWKCQ=">feather.replace()</script>
 {{- end -}}
diff --git a/workers-site/src/handler.ts b/workers-site/src/handler.ts
index 2975599..309096b 100644
--- a/workers-site/src/handler.ts
+++ b/workers-site/src/handler.ts
@@ -4,7 +4,7 @@ const GITHUB_USERNAME = 'msfjarvis'
 const APS_SLUG = 'Android-Password-Store/Android-Password-Store'
 const GITHUB_URL = `https://github.com/${GITHUB_USERNAME}`
 const APS_GITHUB_URL = `https://github.com/${APS_SLUG}`
-const CSP_POLICY = "base-uri 'self'; connect-src 'self'; default-src 'self'; frame-ancestors 'none'; frame-src asciinema.org github.com platform.twitter.com; font-src 'self' fonts.gstatic.com; img-src 'self' data: gfycat.com imgur.com *.imgur.com syndication.twitter.com; object-src 'none'; script-src 'self' asciinema.org cdn.jsdelivr.net platform.twitter.com unpkg.com; style-src 'self' cdn.jsdelivr.net fonts.googleapis.com 'sha256-T5xaPlQfl1etSoFCqKdmLNHpv3NOQn2KQJoj6Pduxg4=';";
+const CSP_POLICY = "base-uri 'self'; connect-src 'self'; default-src 'self'; frame-ancestors 'none'; frame-src asciinema.org github.com platform.twitter.com; font-src 'self' fonts.gstatic.com; img-src 'self' data: gfycat.com imgur.com *.imgur.com syndication.twitter.com; object-src 'none'; script-src 'self' asciinema.org cdn.jsdelivr.net platform.twitter.com unpkg.com; style-src 'self' cdn.jsdelivr.net fonts.googleapis.com 'nonce-MZSWC5DVOJSS23TPNZRWKCQ=';";
 const FEATURE_POLICY = "accelerometer 'none'; autoplay 'none';camera 'none';encrypted-media 'none'; geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'none';picture-in-picture 'none';sync-xhr 'none';usb 'none'"
 const PERMISSIONS_POLICY = "accelerometer=() autoplay=() camera=() encrypted-media=() geolocation=() gyroscope=() magnetometer=() microphone=() midi=() payment=() picture-in-picture=() sync-xhr=() usb=()"