#00000 Improving Score of CSP for VAPT Issue

Sunbird-ALL · Feb 28, 2025 · 71b7745 · 71b7745
1 parent 55d4685
commit 71b7745
Show file tree

Hide file tree

Showing 3 changed files with 33 additions and 31 deletions.
diff --git a/public/index.html b/public/index.html
@@ -27,20 +27,21 @@
     <title>EkStep</title>
 
     <!-- Content Security Policy -->
-  <meta http-equiv="Content-Security-Policy" content="
-      default-src 'self';
-      script-src 'self' https://cdn.jsdelivr.net/npm/[email protected]/dist/confetti.browser.min.js 'unsafe-eval';
-      style-src 'self' https://fonts.googleapis.com https://fonts.cdnfonts.com 'unsafe-inline';
-      object-src 'none';
-      base-uri 'self';
-      connect-src 'self' *.theall.ai https://all-prod-content-service.s3.ap-south-1.amazonaws.com blob:;
-      font-src 'self' https://fonts.googleapis.com https://fonts.cdnfonts.com https://fonts.gstatic.com;
-      frame-src 'self';
-       img-src 'self' https://images.squarespace-cdn.com https://all-prod-content-service.s3.ap-south-1.amazonaws.com https://s3.ap-south-1.amazonaws.com data: blob: https://raw.githubusercontent.com;
-      manifest-src 'self';
-      media-src 'self' blob: https://all-prod-content-service.s3.ap-south-1.amazonaws.com;
-      worker-src 'self' blob: https://d114esnbvw5tst.cloudfront.net;
-    " />
+<meta http-equiv="Content-Security-Policy" content="
+  default-src 'self';
+  script-src 'self' https://cdn.jsdelivr.net/npm/[email protected]/dist/confetti.browser.min.js 'unsafe-eval';
+  style-src 'self' https://fonts.googleapis.com https://fonts.cdnfonts.com 'unsafe-inline';
+  object-src 'none';
+  base-uri 'self';
+  connect-src 'self' *.theall.ai https://all-prod-content-service.s3.ap-south-1.amazonaws.com blob:;
+  font-src 'self' https://fonts.googleapis.com https://fonts.cdnfonts.com https://fonts.gstatic.com;
+  frame-src 'self';
+  img-src 'self' https://images.squarespace-cdn.com https://all-prod-content-service.s3.ap-south-1.amazonaws.com https://s3.ap-south-1.amazonaws.com data: blob: https://raw.githubusercontent.com/;
+  manifest-src 'self';
+  media-src 'self' blob: https://all-prod-content-service.s3.ap-south-1.amazonaws.com;
+  worker-src 'self' blob: https://d114esnbvw5tst.cloudfront.net;
+" />
+
 
   </head>
   <body>

diff --git a/src/components/Layouts.jsx/MainLayout.jsx b/src/components/Layouts.jsx/MainLayout.jsx
@@ -795,7 +795,7 @@ const MainLayout = (props) => {
                         >
                           <Stack justifyContent="center" alignItems="center">
                             <img
-                              src={`https://raw.githubusercontent.com/Sunbird-ALL/all-learner-ai-app/refs/heads/all-1.3/src/assets/images/gameLost.svg`}
+                              src={gameLost}
                               alt="gameLost"
                               style={{ height: 340 }}
                             />
@@ -923,13 +923,10 @@ const MainLayout = (props) => {
                                     </Box>
 
                                     {elem?.correctAnswer === false ? (
-                                      <img
-                                        src="https://raw.githubusercontent.com/Sunbird-ALL/all-learner-ai-app/refs/heads/all-1.2-tn-dev/src/assets/wrong.svg"
-                                        alt="wrongImage"
-                                      />
+                                      <img src={wrongImage} alt="wrongImage" />
                                     ) : (
                                       <img
-                                        src="https://raw.githubusercontent.com/Sunbird-ALL/all-learner-ai-app/refs/heads/all-1.2-tn-dev/src/assets/correct.svg"
+                                        src={correctImage}
                                         alt="correctImage"
                                       />
                                     )}
@@ -944,7 +941,9 @@ const MainLayout = (props) => {
                                         minWidth: "100px",
                                       }}
                                     >
-                                      {elem.selectedAnswer || "Binocular"}
+                                      {elem?.correctOption?.length > 0
+                                        ? elem.correctOption
+                                        : elem.selectedAnswer || "Binocular"}
                                     </span>
                                   </Stack>
                                 ))}
@@ -962,10 +961,7 @@ const MainLayout = (props) => {
                                 justifyContent={"center"}
                                 alignItems={"center"}
                               >
-                                <img
-                                  src="https://raw.githubusercontent.com/Sunbird-ALL/all-learner-ai-app/refs/heads/all-1.2-tn-dev/src/assets/turtle.svg"
-                                  alt="turtleImage"
-                                />
+                                <img src={turtleImage} alt="turtleImage" />
                                 <span
                                   style={{
                                     marginTop: "12px",

diff --git a/src/views/Practice/Practice.jsx b/src/views/Practice/Practice.jsx
@@ -137,7 +137,8 @@ const Practice = () => {
         {
           score: score,
           message: "all-test-rig-score",
-        }, window?.location?.ancestorOrigins?.[0] || window.parent.location.origin
+        },
+        window?.location?.ancestorOrigins?.[0] || window.parent.location.origin
       );
     }
   };
@@ -419,10 +420,8 @@ const Practice = () => {
           });
       }
 
-      let userState = Number.isInteger(
-        Number(resLessons?.result?.result?.lesson)
-      )
-        ? Number(resLessons.result?.result?.lesson)
+      let userState = Number.isInteger(Number(resLessons?.result?.lesson))
+        ? Number(resLessons.result?.lesson)
         : 0;
 
       // TODO: revisit this - looks like not required
@@ -713,11 +712,17 @@ const Practice = () => {
               "mechanic_1")
             ? 500
             : stringLengths[0];
-        window.parent.postMessage({ type: "stringLengths", length }, window?.location?.ancestorOrigins?.[0] || window.parent.location.origin);
+        window.parent.postMessage(
+          { type: "stringLengths", length },
+          window?.location?.ancestorOrigins?.[0] ||
+            window.parent.location.origin
+        );
       }
     }
   }, [questions[currentQuestion]]);
 
+  console.log(mechanism);
+
   const renderMechanics = () => {
     if (!mechanism) {
       return (