csp fixes

This commit is contained in:
kochetkov 2025-01-15 14:54:21 +03:00
parent f3d00958b0
commit 12abacea78
2 changed files with 9 additions and 5 deletions

3
html/browser_check.js Normal file
View file

@ -0,0 +1,3 @@
document.addEventListener("DOMContentLoaded", function(event) {
document.getElementById("browser-check-info").hidden = navigator.userAgent.indexOf("Chromium GOST") > -1 || navigator.userAgent.indexOf("YaBrowser") > -1;
});

View file

@ -4,6 +4,10 @@
<link rel="stylesheet" type="text/css" href="css/inbox.css"> <link rel="stylesheet" type="text/css" href="css/inbox.css">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="viewport" content="width=device-width, initial-scale=1">
<meta http-equiv="Content-Security-Policy"
content="default-src 'self'; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:"/>
<meta name="referrer" content="strict-origin-when-cross-origin"/>
<script src="browser_check.js"></script>
</head> </head>
<body> <body>
@ -20,9 +24,6 @@
</div> </div>
</div> </div>
</div> </div>
<script>
document.getElementById("browser-check-info").hidden = navigator.userAgent.indexOf("Chromium GOST") > -1 || navigator.userAgent.indexOf("YaBrowser") > -1;
</script>
<div class="container-inside"> <div class="container-inside">
<div class="block-group"> <div class="block-group">
<div class="block block-fl"> <div class="block block-fl">
@ -30,7 +31,7 @@
<div class="block-title">Для граждан</div> <div class="block-title">Для граждан</div>
<div class="block-description">Проверить повестки на Ваше имя и получить выписку из Реестра можно в <a href="<!--#echo var="flUrl"-->">Личном кабинете</a></div> <div class="block-description">Проверить повестки на Ваше имя и получить выписку из Реестра можно в <a href="<!--#echo var="flUrl"-->">Личном кабинете</a></div>
<a href="<!--#echo var="flLandingUrl"-->" class="btn">Подробнее</a> <a href="<!--#echo var="flLandingUrl"-->" class="btn">Подробнее</a>
</div> </div>
<div class="block block-ul"> <div class="block block-ul">
<div class="block-img"></div> <div class="block-img"></div>
<div class="block-title">Для организаций</div> <div class="block-title">Для организаций</div>
@ -42,4 +43,4 @@
</div> </div>
</body> </body>
</html> </html>