Skip to content

Conversation

@spikebrehm
Copy link

There exists a bug which causes ian improperly formatted script-src
expression for multiple script hashes. As is, the output for two hash
abcde and fjhij is:

script-src 'sha256-abcde fghij'

This should be:

script-src 'sha256-abcde' 'sha256-fghij'

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

missing a } ?

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

facepalm copy paste error...

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed & force-pushed

There exists a bug which causes ian improperly formatted `script-src`
expression for multiple script hashes. As is, the output for two hash
`abcde` and `fjhij` is:

    script-src 'sha256-abcde fghij'

This should be:

    script-src 'sha256-abcde' 'sha256-fghij'
@spikebrehm spikebrehm force-pushed the fix-multiple-script-hash branch from 2045295 to 777f913 Compare September 3, 2014 00:29
@spikebrehm
Copy link
Author

Strange, the build failure appears to be due to missing/mismatched RSpec features? https://travis-ci.org/twitter/secureheaders/jobs/34242758

@oreoshake
Copy link
Contributor

Yeah, the branch is very old. I'm going to assume merging/rebasing master fixes this. I'll attempt to do so right now.

oreoshake added a commit that referenced this pull request Sep 3, 2014
Fix support for mutliple script hashes
@oreoshake oreoshake merged commit 069f176 into github:script_hash Sep 3, 2014
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants