Compare commits
No commits in common. "e572dc710e218ad24b03bc04052eb619521fe2f1" and "f0d38cc2879bd45738afa4d8ad223f01ca0426b7" have entirely different histories.
e572dc710e
...
f0d38cc287
20
index.html
20
index.html
|
|
@ -4,26 +4,6 @@
|
||||||
<head>
|
<head>
|
||||||
<meta charset="UTF-8">
|
<meta charset="UTF-8">
|
||||||
<meta name="robots" content="noindex, nofollow">
|
<meta name="robots" content="noindex, nofollow">
|
||||||
<!-- JWT / init_key(Auth Gate より先に実行) -->
|
|
||||||
<script>
|
|
||||||
(function () {
|
|
||||||
var u = new URLSearchParams(window.location.search);
|
|
||||||
var token = u.get('token');
|
|
||||||
var initKey = u.get('init_key');
|
|
||||||
if (token) {
|
|
||||||
localStorage.setItem('posimai_token', token);
|
|
||||||
u.delete('token');
|
|
||||||
}
|
|
||||||
if (initKey) {
|
|
||||||
localStorage.setItem('posimai_api_key', initKey);
|
|
||||||
u.delete('init_key');
|
|
||||||
}
|
|
||||||
if (token || initKey) {
|
|
||||||
var newUrl = window.location.pathname + (u.toString() ? '?' + u.toString() : '') + window.location.hash;
|
|
||||||
window.history.replaceState({}, '', newUrl);
|
|
||||||
}
|
|
||||||
})();
|
|
||||||
</script>
|
|
||||||
<!-- Auth Gate -->
|
<!-- Auth Gate -->
|
||||||
<script>
|
<script>
|
||||||
(function () {
|
(function () {
|
||||||
|
|
|
||||||
|
|
@ -19,7 +19,7 @@
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"key": "Content-Security-Policy",
|
"key": "Content-Security-Policy",
|
||||||
"value": "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://cdn.jsdelivr.net https://esm.sh; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://posimai-ui.vercel.app; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; media-src 'self' https:; connect-src 'self' https://api.soar-enrich.com wss://api.soar-enrich.com https:; worker-src 'self'; frame-ancestors 'none';"
|
"value": "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://cdn.jsdelivr.net https://esm.sh; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; media-src 'self' https:; connect-src 'self' https://api.soar-enrich.com wss://api.soar-enrich.com https:; worker-src 'self'; frame-ancestors 'none';"
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"key": "Strict-Transport-Security",
|
"key": "Strict-Transport-Security",
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue