1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2025-01-20 11:41:08 +01:00
phorge-phorge/src/aphront/sink
epriestley c5772f51de Fix Content-Security-Policy headers on "Email Login" page
Summary:
In D20100, I changed this page from returning a `newPage()` with a dialog as its content to returning a more modern `newDialog()`.

However, the magic to add stuff to the CSP header is actually only on the `newPage()` pathway today, so this accidentally dropped the extra "Content-Security-Policy" rule for Google.

Lift the magic up one level so both Dialog and Page responses hit it.

Test Plan:
  - Configured Recaptcha.
  - Between D20100 and this patch: got a CSP error on the Email Login page.
  - After this patch: clicked all the pictures of cars / store fronts.

Reviewers: amckinley

Reviewed By: amckinley

Differential Revision: https://secure.phabricator.com/D20163
2019-02-14 12:53:33 -08:00
..
__tests__ Mark some strings for translation 2015-06-09 23:06:52 +10:00
AphrontHTTPSink.php Fix Content-Security-Policy headers on "Email Login" page 2019-02-14 12:53:33 -08:00
AphrontIsolatedHTTPSink.php Prepare file responses for streaming chunks 2015-03-14 08:29:12 -07:00
AphrontPHPHTTPSink.php Don't call flush() when emitting responses 2015-03-23 09:09:45 -07:00