Mrazadar/pon 161/content security fix (#777)

* revert: the react-helmet * feat: added content-security-policy meta tag at the top
openedx-unsupported · Jul 20, 2023 · 2225a3d · 2225a3d
1 parent ff70192
commit 2225a3d
Show file tree

Hide file tree

Showing 5 changed files with 1 addition and 47 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -54,7 +54,6 @@
     "prop-types": "^15.8.1",
     "react": "^17.0.2",
     "react-dom": "^17.0.2",
-    "react-helmet": "^6.1.0",
     "react-redux": "^7.2.8",
     "react-router-dom": "^5.3.3",
     "react-tooltip": "^4.2.21",

diff --git a/public/index.html b/public/index.html
@@ -5,6 +5,7 @@
     <link rel="preconnect" href="<%= preconnectURL %>" />
     <% }); %>
     <title>Payment | edX</title>
+    <meta http-equiv="Content-Security-Policy" content="frame-src 'self' https://js.stripe.com https://hooks.stripe.com;"/>
     <meta charset="utf-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <link rel="shortcut icon" href="<%=htmlWebpackPlugin.options.FAVICON_URL%>" type="image/x-icon" />

diff --git a/src/components/helmet-header/HelmetHeader.jsx b/src/components/helmet-header/HelmetHeader.jsx
diff --git a/src/index.jsx b/src/index.jsx
@@ -36,7 +36,6 @@ import {
 } from './payment';
 import { SubscriptionPage } from './subscription';
 import { Secure3dRedirectPage } from './subscription/secure-3d/Secure3dRedirectPage';
-import { HelmetHeader } from './components/helmet-header/HelmetHeader';
 import configureStore from './data/configureStore';
 
 import './index.scss';
@@ -86,7 +85,6 @@ subscribe(APP_READY, () => {
 
   ReactDOM.render(
     <AppProvider store={configureStore()}>
-      <HelmetHeader />
       <Header />
       <main id="main">
         <Switch>