diff options
Diffstat (limited to 'src/main/webapp/js/diagramly/Devel.js')
| -rw-r--r-- | src/main/webapp/js/diagramly/Devel.js | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/src/main/webapp/js/diagramly/Devel.js b/src/main/webapp/js/diagramly/Devel.js index fa05c08b..f860319a 100644 --- a/src/main/webapp/js/diagramly/Devel.js +++ b/src/main/webapp/js/diagramly/Devel.js @@ -105,8 +105,7 @@ if (!mxIsElectron && location.protocol !== 'http:') 'worker-src https://se.diagrams.net/service-worker.js;' console.log('se.diagrams.net:', se_diagrams_net); - // TODO remove https://ajax.googleapis.com April 2022. It's old jquery domain - var ac_draw_io = csp.replace(/%script-src%/g, 'https://aui-cdn.atlassian.com https://connect-cdn.atl-paas.net https://ajax.googleapis.com https://cdnjs.cloudflare.com'). + var ac_draw_io = csp.replace(/%script-src%/g, 'https://aui-cdn.atlassian.com https://connect-cdn.atl-paas.net'). replace(/%frame-src%/g, 'https://www.lucidchart.com https://app.lucidchart.com https://lucid.app blob:'). replace(/%style-src%/g, 'https://aui-cdn.atlassian.com https://*.atlassian.net'). replace(/%connect-src%/g, ''). @@ -114,7 +113,7 @@ if (!mxIsElectron && location.protocol !== 'http:') 'worker-src https://ac.draw.io/service-worker.js;'; console.log('ac.draw.io:', ac_draw_io); - var aj_draw_io = csp.replace(/%script-src%/g, 'https://aui-cdn.atlassian.com https://cdnjs.cloudflare.com https://connect-cdn.atl-paas.net'). + var aj_draw_io = csp.replace(/%script-src%/g, 'https://aui-cdn.atlassian.com https://connect-cdn.atl-paas.net'). replace(/%frame-src%/g, 'blob:'). replace(/%style-src%/g, 'https://aui-cdn.atlassian.com https://*.atlassian.net'). replace(/%connect-src%/g, 'https://api.atlassian.com https://api.media.atlassian.com'). |