Fix cross-origin integrity (#1871)

See <https://glitch.social/users/bea/updates/434>

diff --git a/app/views/home/index.html.haml b/app/views/home/index.html.haml
index 5b6f5b855264bbd22c83ab8b0a74437a9587643d..df4223ed2f21b9f091c7a4639ef0cf3f5da14c1a 100644 (file)
--- a/app/views/home/index.html.haml
+++ b/app/views/home/index.html.haml
@@ -1,6 +1,6 @@
 - content_for :header_tags do
   %script#initial-state{:type => 'application/json'}!= json_escape(render(file: 'home/initial_state', formats: :json))
 
-  = javascript_include_tag 'application', integrity: true
+  = javascript_include_tag 'application', integrity: true, crossorigin: 'anonymous'
 
 = react_component 'Mastodon', default_props, class: 'app-holder', prerender: false

diff --git a/app/views/layouts/admin.html.haml b/app/views/layouts/admin.html.haml
index fa364750f98d27c7dc8967a12c435547900f31f1..892bcd596d3ff3ff8bd34d3d6c0fa0fc0a3f0311 100644 (file)
--- a/app/views/layouts/admin.html.haml
+++ b/app/views/layouts/admin.html.haml
@@ -1,5 +1,5 @@
 - content_for :header_tags do
-  = javascript_include_tag 'application_public', integrity: true
+  = javascript_include_tag 'application_public', integrity: true, crossorigin: 'anonymous'
 
 - content_for :content do
   .admin-wrapper

diff --git a/app/views/layouts/auth.html.haml b/app/views/layouts/auth.html.haml
index bf4113baf23af718c365f5d1c79b6f72d6e696aa..899690419528a2d1c88fa0d59c082f3a4c5645ca 100644 (file)
--- a/app/views/layouts/auth.html.haml
+++ b/app/views/layouts/auth.html.haml
@@ -1,5 +1,5 @@
 - content_for :header_tags do
-  = javascript_include_tag 'application_public', integrity: true
+  = javascript_include_tag 'application_public', integrity: true, crossorigin: 'anonymous'
 
 - content_for :content do
   .container

diff --git a/app/views/layouts/embedded.html.haml b/app/views/layouts/embedded.html.haml
index c34247c913270f791bf05e8b57aaa18318b488ca..562be66259dd1cceaaa7311df3c782a3e8a1662d 100644 (file)
--- a/app/views/layouts/embedded.html.haml
+++ b/app/views/layouts/embedded.html.haml
@@ -3,6 +3,6 @@
   %head
     %meta{:charset => 'utf-8'}/
     = stylesheet_link_tag 'application', media: 'all'
-    = javascript_include_tag 'application_public', integrity: true
+    = javascript_include_tag 'application_public', integrity: true, crossorigin: 'anonymous'
   %body.embed
     = yield

diff --git a/app/views/layouts/public.html.haml b/app/views/layouts/public.html.haml
index 56781a286e523a53a7670c7c7be877a24518e7e7..fdde0a681388bd47efd554cecd9aa03227f29960 100644 (file)
--- a/app/views/layouts/public.html.haml
+++ b/app/views/layouts/public.html.haml
@@ -1,5 +1,5 @@
 - content_for :header_tags do
-  = javascript_include_tag 'application_public', integrity: true
+  = javascript_include_tag 'application_public', integrity: true, crossorigin: 'anonymous'
 
 - content_for :content do
   .container= yield