skorotkiewicz/rDrama
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix: HCaptcha broken.

Browse source
This commit is contained in:
Ben Rog-Wilhelm 2023-10-12 12:33:10 -05:00
parent c5d380afb1
commit 7575b9c8fe
4 changed files with 4 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

1
files/assets/js/hcaptcha.js
View file

File diff suppressed because one or more lines are too long

4
files/routes/allroutes.py
View file

@ -54,10 +54,10 @@ def after_request(response: Response):
response.headers.add("Content-Security-Policy", (""" response.headers.add("Content-Security-Policy", ("""
script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://hcaptcha.com https://*.hcaptcha.com; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://hcaptcha.com https://*.hcaptcha.com;
img-src 'self' https://*.google-analytics.com https://*.googletagmanager.com; img-src 'self' https://*.google-analytics.com https://*.googletagmanager.com;
connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://hcaptcha.com, https://*.hcaptcha.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://hcaptcha.com https://*.hcaptcha.com;
object-src 'none'; object-src 'none';
frame-src https://hcaptcha.com https://*.hcaptcha.com; frame-src https://hcaptcha.com https://*.hcaptcha.com;
style-src https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com;
""".replace('\n', '').replace('\t', ' '))) """.replace('\n', '').replace('\t', ' ')))
response.headers.add("Strict-Transport-Security", "max-age=31536000") response.headers.add("Strict-Transport-Security", "max-age=31536000")
response.headers.add("X-Frame-Options", "deny") response.headers.add("X-Frame-Options", "deny")

2
files/templates/contact.html
View file

@ -40,6 +40,6 @@
<p>If you can see this line, we haven't been contacted by any law enforcement or governmental organizations in 2023 yet.</p> <p>If you can see this line, we haven't been contacted by any law enforcement or governmental organizations in 2023 yet.</p>
</section> </section>
{% if hcaptcha %} {% if hcaptcha %}
<script src="{{ 'js/hcaptcha.js' | asset }}"></script> <script src="https://js.hcaptcha.com/1/api.js" async defer></script>
{% endif %} {% endif %}
{% endblock %} {% endblock %}

2
files/templates/login/sign_up.html
View file

@ -56,6 +56,6 @@
{%- block scripts -%} {%- block scripts -%}
<script src="{{ 'js/signup.js' | asset }}"></script> <script src="{{ 'js/signup.js' | asset }}"></script>
{% if hcaptcha %} {% if hcaptcha %}
<script src="{{ 'js/hcaptcha.js' | asset }}"></script> <script src="https://js.hcaptcha.com/1/api.js" async defer></script>
{% endif %} {% endif %}
{%- endblock -%} {%- endblock -%}