From a271a04b6d7f81a345bf153bafa53121ce6a0709 Mon Sep 17 00:00:00 2001 From: bbimber Date: Thu, 20 Feb 2025 09:12:19 -0800 Subject: [PATCH] Add ContentSecurityPolicyFilter.registerAllowedSources() (#337) --- jbrowse/src/org/labkey/jbrowse/JBrowseModule.java | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/jbrowse/src/org/labkey/jbrowse/JBrowseModule.java b/jbrowse/src/org/labkey/jbrowse/JBrowseModule.java index 889cf0e72..a5ec8702a 100644 --- a/jbrowse/src/org/labkey/jbrowse/JBrowseModule.java +++ b/jbrowse/src/org/labkey/jbrowse/JBrowseModule.java @@ -26,6 +26,7 @@ import org.labkey.api.module.ModuleContext; import org.labkey.api.pipeline.PipelineService; import org.labkey.api.query.DetailsURL; +import org.labkey.api.security.Directive; import org.labkey.api.security.permissions.AdminOperationsPermission; import org.labkey.api.sequenceanalysis.SequenceAnalysisService; import org.labkey.api.sequenceanalysis.pipeline.SequencePipelineService; @@ -114,7 +115,8 @@ public void doStartupAfterSpringConfig(ModuleContext moduleContext) JBrowseService.get().registerGroupsProvider(new JBrowseLuceneSearch.TestJBrowseGroupProvider()); // These are all part of the JBrowse demo data: - ContentSecurityPolicyFilter.registerAllowedConnectionSource(this.getClass().getName(), "https://jbrowse.org", "https://s3.amazonaws.com", "https://ftp.ncbi.nlm.nih.gov", "https://www.gstatic.com"); + ContentSecurityPolicyFilter.registerAllowedSources(Directive.Connection, this.getClass().getName(), "https://jbrowse.org", "https://s3.amazonaws.com", "https://ftp.ncbi.nlm.nih.gov"); + ContentSecurityPolicyFilter.registerAllowedSources(Directive.Style, this.getClass().getName(), "https://www.gstatic.com"); ContextListener.addShutdownListener(new JBrowseLuceneSearch.ShutdownHandler()); }