Add a CSP to upgrade http requests to https

This will make it easier for existing projects that add images or JS libraries and, AFAIK, request http projects to load things when snap is served over https. 

**TODO**
When/If we serve snap.html over a plan http connection, we need to see if this also upgrades requests to local servers that aren't going to have SSL.
upd4.2
Michael Ball 2018-02-27 02:17:44 -08:00 zatwierdzone przez GitHub
rodzic c5a6596542
commit 6f6c31dede
Nie znaleziono w bazie danych klucza dla tego podpisu
ID klucza GPG: 4AEE18F83AFDEB23
1 zmienionych plików z 1 dodań i 0 usunięć

Wyświetl plik

@ -2,6 +2,7 @@
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">
<title>Snap! Build Your Own Blocks 4.1.2.2</title>
<link rel="shortcut icon" href="favicon.ico">
<script type="text/javascript" src="morphic.js?version=2018-02-20"></script>