Compare commits

..

No commits in common. "e572dc710e218ad24b03bc04052eb619521fe2f1" and "f0d38cc2879bd45738afa4d8ad223f01ca0426b7" have entirely different histories.

2 changed files with 1 additions and 21 deletions

View File

@ -4,26 +4,6 @@
<head>
<meta charset="UTF-8">
<meta name="robots" content="noindex, nofollow">
<!-- JWT / init_keyAuth Gate より先に実行) -->
<script>
(function () {
var u = new URLSearchParams(window.location.search);
var token = u.get('token');
var initKey = u.get('init_key');
if (token) {
localStorage.setItem('posimai_token', token);
u.delete('token');
}
if (initKey) {
localStorage.setItem('posimai_api_key', initKey);
u.delete('init_key');
}
if (token || initKey) {
var newUrl = window.location.pathname + (u.toString() ? '?' + u.toString() : '') + window.location.hash;
window.history.replaceState({}, '', newUrl);
}
})();
</script>
<!-- Auth Gate -->
<script>
(function () {

View File

@ -19,7 +19,7 @@
},
{
"key": "Content-Security-Policy",
"value": "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://cdn.jsdelivr.net https://esm.sh; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://posimai-ui.vercel.app; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; media-src 'self' https:; connect-src 'self' https://api.soar-enrich.com wss://api.soar-enrich.com https:; worker-src 'self'; frame-ancestors 'none';"
"value": "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://cdn.jsdelivr.net https://esm.sh; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; media-src 'self' https:; connect-src 'self' https://api.soar-enrich.com wss://api.soar-enrich.com https:; worker-src 'self'; frame-ancestors 'none';"
},
{
"key": "Strict-Transport-Security",