add configs to handle content-security-policy correctly for custom fxa urls

2020-06-11 21:57:48 +08:00 · 2020-06-11 21:57:48 +08:00 · e2876b119d
commit e2876b119d
parent 5fb9e395d5
2 changed files with 41 additions and 3 deletions
--- a/server/config.js
+++ b/server/config.js
@ -145,6 +145,26 @@ const conf = convict({
    default: 'https://identity.mozilla.com/apps/send',
    env: 'FXA_KEY_SCOPE'
  },
+  fxa_csp_oauth_url: {
+    format: String,
+    default: '',
+    env: 'FXA_CSP_OAUTH_URL'
+  },
+  fxa_csp_content_url: {
+    format: String,
+    default: '',
+    env: 'FXA_CSP_CONTENT_URL'
+  },
+  fxa_csp_profile_url: {
+    format: String,
+    default: '',
+    env: 'FXA_CSP_PROFILE_URL'
+  },
+  fxa_csp_profileimage_url: {
+    format: String,
+    default: '',
+    env: 'FXA_CSP_PROFILEIMAGE_URL'
+  },
  survey_url: {
    format: String,
    default: '',