5adcf6bc2904690de7b7b30a83ec8a7a0996abe9 galt Tue Aug 21 00:01:25 2018 -0700 changing cse subdomain to soe diff --git src/hg/pyLib/hgLib.py src/hg/pyLib/hgLib.py index 3234eca..ed6d3d0 100644 --- src/hg/pyLib/hgLib.py +++ src/hg/pyLib/hgLib.py @@ -645,31 +645,31 @@ policy += " maxcdn.bootstrapcdn.com" # used by hgGateway policy += " fonts.gstatic.com" # used by hgGateway policy += ";" dyStringAppend(policy, " object-src 'none';"); ''' policy += " img-src * data:;" ''' # more secure method not used yet policy += " img-src 'self'" # used by hgGene for modbaseimages in hg/hgc/lowelab.c hg/protein/lib/domains.c hg/hgGene/domains.c policy += " modbase.compbio.ucsf.edu"); - policy += " hgwdev.cse.ucsc.edu"); # used by visiGene + policy += " hgwdev.soe.ucsc.edu"); # used by visiGene policy += " genome.ucsc.edu"); # used by visiGene policy += " code.jquery.com"); # used by hgIntegrator policy += " www.google-analytics.com"); # used by google analytics policy += " stats.g.doubleclick.net"); # used by google analytics policy += ";" ''' return policy def getCspMetaString(policy): " get the policy string as an html header meta tag " # use double quotes around policy because it contains single-quoted values. return "<meta http-equiv='Content-Security-Policy' content=\"" + policy + "\">\n" def getCspMetaResponseHeader(policy):