npm package diff
Package: @forge/csp
Versions: 3.5.0 - 3.6.0-next.0
File: package/out/csp/csp-injection-service.js
Index: package/out/csp/csp-injection-service.js
===================================================================
--- package/out/csp/csp-injection-service.js
+++ package/out/csp/csp-injection-service.js
@@ -1,7 +1,7 @@
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
-exports.CSPInjectionService = void 0;
+exports.CSPInjectionService = exports.EXTERNAL_ALLOW_LISTED_IMAGES_HOSTS = exports.ATLASSIAN_IMAGES_HOSTS = void 0;
const types_1 = require("../types");
const ATLASSIAN_API_GATEWAY_HOST = {
dev: 'https://api.dev.atlassian.com',
stg: 'https://api.stg.atlassian.com',
@@ -29,9 +29,9 @@
prod: 'https://pf-emoji-service--cdn.us-east-1.prod.public.atl-paas.net',
'fedramp-stg': 'https://pf-emoji-service--cdn.us-east-1.staging.cdn.atlassian-us-gov-mod.com',
'fedramp-prod': 'https://pf-emoji-service--cdn.us-east-1.prod.cdn.atlassian-us-gov-mod.com'
};
-const ATLASSIAN_IMAGES_HOSTS = {
+exports.ATLASSIAN_IMAGES_HOSTS = {
dev: [
`https://${ATLASSIAN_AVATAR_HOST['dev']}`,
`https://*.wp.com/${ATLASSIAN_AVATAR_HOST['dev']}/`,
ATLASSIAN_API_GATEWAY_HOST['dev'],
@@ -66,9 +66,9 @@
ATLASSIAN_MEDIA_GATEWAY_HOST['fedramp-prod'],
ATLASSIAN_EMOJIS_HOST['fedramp-prod']
]
};
-const EXTERNAL_ALLOW_LISTED_IMAGES_HOSTS = ['https://secure.gravatar.com', 'https://images.unsplash.com'];
+exports.EXTERNAL_ALLOW_LISTED_IMAGES_HOSTS = ['https://secure.gravatar.com', 'https://images.unsplash.com'];
class CSPInjectionService {
getCSPReportUri(microsEnv) {
if (microsEnv === 'dev' || microsEnv === 'stg')
return 'https://web-security-reports.stg.services.atlassian.com/csp-report/forge-cdn';
@@ -129,10 +129,10 @@
"'self'",
'data:',
'blob:',
hostname,
- ...EXTERNAL_ALLOW_LISTED_IMAGES_HOSTS,
- ...ATLASSIAN_IMAGES_HOSTS[microsEnv],
+ ...exports.EXTERNAL_ALLOW_LISTED_IMAGES_HOSTS,
+ ...exports.ATLASSIAN_IMAGES_HOSTS[microsEnv],
...this.getExistingCSPDetails(types_1.ExternalCspType.IMG_SRC, existingCSPDetails)
]
.filter((a) => a)
.join(' ');