Merge pull request #166 from waldo-vision/ts/patch-attempt

add sha hash to csp for cf turnstile add missing game types to submission dropdown
waldo-vision · Mar 26, 2023 · 950b32e · 950b32e
2 parents 9f06f15 + be36915
commit 950b32e
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/apps/web/next.config.js b/apps/web/next.config.js
@@ -19,7 +19,7 @@ const securityHeaders = [
   {
     key: 'Content-Security-Policy',
     value:
-      "default-src 'self'; img-src * data:; script-src 'self' 'unsafe-eval' https://challenges.cloudflare.com/; connect-src 'self' https://youtube.com https://www.youtube.com; style-src 'self' 'unsafe-inline'; frame-src https://challenges.cloudflare.com https://youtube.com https://www.youtube.com; upgrade-insecure-requests;",
+      "default-src 'self'; img-src * data:; script-src 'self' 'sha256-ac1zrQEmy3XGPb0cfRRfRfJrTtI7BslOmDFWYr9sDbQ=' 'unsafe-eval' https://challenges.cloudflare.com/; connect-src 'self' https://youtube.com https://www.youtube.com; style-src 'self' 'unsafe-inline'; frame-src https://challenges.cloudflare.com https://youtube.com https://www.youtube.com; upgrade-insecure-requests;",
   },
 ];
 
@@ -61,7 +61,7 @@ const nextConfig = {
   async headers() {
     if (process.env.NODE_ENV === 'production') {
       securityHeaders[4].value =
-        "default-src 'self'; img-src * data:; script-src 'self' https://challenges.cloudflare.com/; style-src 'self' 'unsafe-inline'; connect-src 'self' https://youtube.com https://www.youtube.com; frame-src https://challenges.cloudflare.com https://youtube.com https://www.youtube.com; upgrade-insecure-requests;";
+        "default-src 'self'; img-src * data:; script-src 'self' 'sha256-ac1zrQEmy3XGPb0cfRRfRfJrTtI7BslOmDFWYr9sDbQ=' https://challenges.cloudflare.com/; style-src 'self' 'unsafe-inline'; connect-src 'self' https://youtube.com https://www.youtube.com; frame-src https://challenges.cloudflare.com https://youtube.com https://www.youtube.com; upgrade-insecure-requests;";
     }
     return [
       {

diff --git a/apps/web/pages/submissions/upload.tsx b/apps/web/pages/submissions/upload.tsx
@@ -89,6 +89,8 @@ export default function Upload() {
     { name: 'VALORANT', shortName: 'val' },
     { name: 'Team Fortress 2', shortName: 'tf2' },
     { name: 'Apex Legends', shortName: 'ape' },
+    { name: 'Call of Duty: Warzone', shortName: 'cod' },
+    { name: 'Rainbow Six Siege', shortName: 'r6s' },
   ];
   const cheatsArray = [
     { name: 'NOCHEAT' },