diff options
| author | Ed Tanous <ed.tanous@intel.com> | 2018-12-19 17:59:28 -0800 |
|---|---|---|
| committer | Ed Tanous <ed.tanous@intel.com> | 2018-12-22 17:34:04 +0000 |
| commit | 11adec7e71dc62952a573a2201e7284c440f396b (patch) | |
| tree | 18c1152ec5454d36054f4cafbec7fc960167013c | |
| parent | f04960f5e6992ac42c4a93bcd8c2d2ff11e8d501 (diff) | |
| download | phosphor-webui-11adec7e71dc62952a573a2201e7284c440f396b.tar.gz phosphor-webui-11adec7e71dc62952a573a2201e7284c440f396b.zip | |
webui: enable ngCSP
ngCSP allows angular to avoid using inline style and unsafe eval
mechanisms. Enabling this will allow us to update to a more stringent
content-security policy.
for more details, see documentation here:
https://docs.angularjs.org/api/ng/directive/ngCsp
Tested by:
Launching the GUI, and saw no ill effects.
Change-Id: I4db732e997c2901d1fe57eee99607007b5e3afec
Signed-off-by: Ed Tanous <ed.tanous@intel.com>
| -rw-r--r-- | app/index.html | 2 | ||||
| -rw-r--r-- | app/index.js | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/app/index.html b/app/index.html index de38fb7..62ddfc5 100644 --- a/app/index.html +++ b/app/index.html @@ -1,5 +1,5 @@ <!doctype html> -<html ng-app="app" lang="en"> +<html ng-app="app" ng-csp lang="en"> <head> <meta charset="UTF-8"> diff --git a/app/index.js b/app/index.js index 4bb6a4c..645f315 100644 --- a/app/index.js +++ b/app/index.js @@ -6,7 +6,7 @@ * @exports app/index * */ - +import 'angular/angular-csp.css'; import 'bootstrap/dist/css/bootstrap.css'; import angular from 'angular'; |
