@@ -218,7 +218,7 @@ def get_sites(tlp = true)
218218 end
219219 return sites , crawl_time
220220 end
221-
221+
222222 CSP_INFRA_BASE = <<-EOD . strip . gsub ( %r{([.*])} , "\\ \\ \\ 1" )
223223 'self' data: blob: 'unsafe-inline' 'unsafe-eval'
224224 https://www.apachecon.com/
@@ -228,7 +228,7 @@ def get_sites(tlp = true)
228228 CSP_THIRD_PARTY = "https://*.scarf.sh/ " . gsub ( %r{([.*])} , "\\ \\ \\ 1" )
229229
230230 CSP_PROJECT_DOMAINS = "(.*)" # Allow anything here (capture it)
231-
231+
232232 DEFAULT_CSP = <<-EOD . strip . gsub ( "\n " , '' ) . gsub ( / +/ , ' ' )
233233 default-src #{ CSP_INFRA_BASE } #{ CSP_THIRD_PARTY } #{ CSP_PROJECT_DOMAINS } ;
234234 script-src #{ CSP_INFRA_BASE } #{ CSP_THIRD_PARTY } #{ CSP_PROJECT_DOMAINS } ;
@@ -242,7 +242,7 @@ def get_sites(tlp = true)
242242 WWW_CSP = <<-EOD . strip . gsub ( "\n " , '' ) . gsub ( / +/ , ' ' )
243243 default-src 'self' data: 'unsafe-inline'
244244 https://www.apachecon.com/ https://analytics.apache.org/ http://analytics.apache.org/
245- https://www.youtube-nocookie.com https://www.youtube.com;
245+ https://www.youtube-nocookie.com https://www.youtube.com;
246246 script-src 'self' 'unsafe-inline' 'unsafe-eval'
247247 https://www.apachecon.com/ https://analytics.apache.org/ http://analytics.apache.org/
248248 https://www.youtube-nocookie.com https://www.youtube.com;
@@ -298,7 +298,7 @@ def process_csp(sites)
298298 end
299299 end
300300 end
301-
301+
302302 # Analyze data returned from site-scan.rb by using checks[CHECK_VALIDATE] regex
303303 # If value =~ CHECK_VALIDATE, SITE_PASS
304304 # If value is present (presumably from CHECK_TEXT|CAPTURE), then SITE_WARN
0 commit comments