add compiler-explorer.com to csp thingymabob

Author: partouf

Diff for: lib/csp.js

@@ -25,20 +25,20 @@
 const _ = require('underscore');
 
 const data = {
-    'default-src': ["'self'", 'https://*.godbolt.org', 'localhost:*'],
-    'style-src': ["'self'", "'unsafe-inline'", 'https://*.godbolt.org', 'localhost:*'],
-    'script-src': ["'self'", "'unsafe-inline'", 'data:', 'https://*.godbolt.org', 'localhost:*',
+    'default-src': ["'self'", 'https://*.godbolt.org', 'localhost:*', 'https://*.compiler-explorer.com'],
+    'style-src': ["'self'", "'unsafe-inline'", 'https://*.godbolt.org', 'localhost:*', 'https://*.compiler-explorer.com'],
+    'script-src': ["'self'", "'unsafe-inline'", 'data:', 'https://*.godbolt.org', 'localhost:*', 'https://*.compiler-explorer.com',
         'https://*.twitter.com', 'https://www.google-analytics.com',
         'https://apis.google.com', 'https://ssl.google-analytics.com', 'https://sentry.io/'],
-    'img-src': ["'self'", 'https://*.godbolt.org', 'localhost:*', 'data:', 'https://www.google-analytics.com/',
+    'img-src': ["'self'", 'https://*.godbolt.org', 'localhost:*', 'https://*.compiler-explorer.com', 'data:', 'https://www.google-analytics.com/',
         'https://syndication.twitter.com', 'https://ssl.google-analytics.com', 'https://csi.gstatic.com'],
-    'font-src': ["'self'", 'data:', 'https://*.godbolt.org', 'localhost:*', 'https://fonts.gstatic.com',
+    'font-src': ["'self'", 'data:', 'https://*.godbolt.org', 'localhost:*', 'https://*.compiler-explorer.com', 'https://fonts.gstatic.com',
         'https://themes.googleusercontent.com'],
-    'frame-src': ["'self'", 'https://*.godbolt.org', 'localhost:*', 'https://www.google-analytics.com',
+    'frame-src': ["'self'", 'https://*.godbolt.org', 'localhost:*', 'https://*.compiler-explorer.com', 'https://www.google-analytics.com',
         'https://accounts.google.com/', 'https://content.googleapis.com/',
         'https://sentry.io', 'https://platform.twitter.com/', 'https://syndication.twitter.com/'],
-    'connect-src': ["'self'", '*', 'https://*.godbolt.org', 'localhost:*', 'https://api.github.com'],
-    'media-src': ["'self'", 'https://ssl.gstatic.com', 'https://*.godbolt.org', 'localhost:*']
+    'connect-src': ["'self'", '*', 'https://*.godbolt.org', 'localhost:*', 'https://*.compiler-explorer.com', 'https://api.github.com'],
+    'media-src': ["'self'", 'https://ssl.gstatic.com', 'https://*.godbolt.org', 'localhost:*', 'https://*.compiler-explorer.com']
 };
 
 module.exports = {

Diff for: test/csp-tests.js

@@ -34,6 +34,11 @@ describe('CSP', () => {
             csp.data[value].should.include.members(['https://*.godbolt.org', "'self'"])
         });
     });
+    it('Should work in the compiler-explorer domain for every field', () => {
+        Object.keys(csp.data).forEach(value => {
+            csp.data[value].should.include.members(['https://*.compiler-explorer.com', "'self'"])
+        });
+    });
     it('Should work in a localhost environment for every field', () => {
         Object.keys(csp.data).forEach(value => {
             csp.data[value].should.include.members(['localhost:*', "'self'"])