Update SCE delegate whitelist

Close #1420

Update SCE delegate whitelist
Close #1420
5e09e6f3 · Randall Leeds · 46c69c33 · 5e09e6f3
Commit 5e09e6f3 authored Aug 20, 2014 by Randall Leeds
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 1 deletion

app.coffee h/static/scripts/app.coffee +2 -1

No files found.
--- a/h/static/scripts/app.coffee
+++ b/h/static/scripts/app.coffee
@@ -58,7 +58,8 @@ configure = [
      baseURI = if baseTags.length then baseTags[0].href else document.URL

    # Explicitly whitelist '.html' paths adjacent to application base URI
-    basePattern = baseURI.replace /\/[^\/]*$/, '/*.html'
+    # TODO: move all front-end templates into their own directory for safety
+    basePattern = baseURI.replace /\/[^\/]*$/, '/**.html'
    $sceDelegateProvider.resourceUrlWhitelist ['self', basePattern]
 ]