Merge pull request #339 from moreonion/csp

Enable use of CSP headers

campaignion_auth/campaignion_auth.module

@@ -21,3 +21,15 @@ function campaignion_auth_little_helpers_services() {
   ];
   return $info;
 }
+
+/**
+ * Implements hook_d7csp_csp_hosts().
+ */
+function campaignion_auth_d7csp_hosts() {
+  $hosts = [];
+  if ($url = variable_get_value('campaignion_auth_app_url')) {
+    $parts = parse_url($url);
+    $hosts['connect-src'][] = "{$parts['scheme']}://{$parts['host']}";
+  }
+  return $hosts;
+}

campaignion_bar/campaignion_bar.module

@@ -298,3 +298,11 @@ function _campaignion_bar_add_sublinks_to_output(&$output, $sublinks) {
   }
   $output .= '</ul>';
 }
+
+/**
+ * Implements d7csp_hosts().
+ */
+function campaignion_bar_d7csp_hosts() {
+  $hosts['img-src'][] = 'ucarecdn.com';
+  return $hosts;
+}

campaignion_facebook_pixel/campaignion_facebook_pixel.module

@@ -41,6 +41,7 @@ function campaignion_facebook_pixel_campaignion_tracking_snippets() {
 !function(f,b,e,v,n,t,s){if(f.fbq&&!f.fbq.dummy)return;
 f.fbq.dummy=0;
 t=b.createElement(e);t.async=!0;
+n=b.querySelector('[nonce]');n&&t.setAttribute('nonce',n.nonce||n.getAttribute('nonce'));
 t.src=v;s=b.getElementsByTagName(e)[0];s.parentNode.insertBefore(t,s)}(window,
 document,'script','https://connect.facebook.net/en_US/fbevents.js');
 SNIPPET;