From 2b04f2c6cbf5821ecd63fe57456d1417c55135dd Mon Sep 17 00:00:00 2001 From: Ratko Zagorac <90400759+zagi25@users.noreply.github.com> Date: Thu, 13 Jul 2023 13:22:01 +0200 Subject: [PATCH 1/3] Update CSP: dev.js --- acrobat/scripts/contentSecurityPolicy/dev.js | 89 ++++++++++++++++++++ 1 file changed, 89 insertions(+) diff --git a/acrobat/scripts/contentSecurityPolicy/dev.js b/acrobat/scripts/contentSecurityPolicy/dev.js index aa4e35d..9124a0c 100644 --- a/acrobat/scripts/contentSecurityPolicy/dev.js +++ b/acrobat/scripts/contentSecurityPolicy/dev.js @@ -47,6 +47,22 @@ const connectSrc = [ '*.hlx.page', '*.hlx.live', 'cdn.linkedin.oribi.io', + '345-tti-184.mktoutil.com', + 'adservice.google.com', + 'rum.hlx.page', + 'us-central1-adaptive-growth.cloudfunctions.net', + 'ad.doubleclick.net', + 'cdnmd.global-cache.online', + 'ff.kis.v2.scr.kaspersky-labs.com', + 'gc.kes.v2.scr.kaspersky-labs.com', + 'gc.kis.v2.scr.kaspersky-labs.com', + 'me.kis.v2.scr.kaspersky-labs.com', + 'pagead2.googlesyndication.com', + 'tag-logger.demandbase.com', + 'tl.ytlogs.ru', + 'tr.snapchat.com', + 'trial-eum-clienttons-s.akamaihd.net', + 'www.google.com', ';', ]; @@ -59,6 +75,9 @@ const defaultSrc = [ const fontSrc = [ '\'self\'', 'use.typekit.net', + 'assets.merci-app.com', + 'fonts.bunny.net', + 'fonts.gstatic.com', ';', ]; @@ -91,6 +110,16 @@ const frameSrc = [ 'vimeo.com', 'www.facebook.com', 'www.youtube.com', + 's.company-target.com', + 'accessdenied.pnc.com', + 'gateway.zscaler.net', + 'gateway.zscalertwo.net', + 'gateway.zscloud.net', + 'pixel.everesttech.net', + 'safe.menlosecurity.com', + 'td.doubleclick.net', + 'trendlavida.com', + 'zswpmanager.wip.mmc.com', ';', ]; @@ -137,6 +166,66 @@ const imgSrc = [ 'fast-track--milo--adobecom.hlx.live', '*.hlx.page', '*.hlx.live', + 'l.clicktale.net', + 'www.google.ca', + 'www.google.co.kr', + 'www.google.co.uk', + 'www.google.co.za', + 'www.google.com', + 'www.google.com.mx', + 'www.google.com.sa', + 'www.google.com.tr', + 'www.google.com.tw', + 'www.google.de', + 'www.google.fr', + 'www.google.it', + 'adservice.google.com', + 'analytics.tiktok.com', + 'analytics.twitter.com', + 'c.clicktale.net', + 'googleads.g.doubleclick.net', + 'id.rlcdn.com', + 'mir-s3-cdn-cf.behance.net', + 't.co', + 'translate.google.com', + 'www.google.ae', + 'www.google.al', + 'www.google.at', + 'www.google.az', + 'www.google.ba', + 'www.google.be', + 'www.google.bg', + 'www.google.bi', + 'www.google.bs', + 'www.google.bt', + 'www.google.by', + 'www.google.cd', + 'www.google.ci', + 'www.google.cl', + 'www.google.cm', + 'www.google.co.ao', + 'www.google.co.bw', + 'www.google.co.cr', + 'www.google.co.id', + 'www.google.co.il', + 'www.google.co.ke', + 'www.google.co.ls', + 'www.google.co.ma', + 'www.google.co.mz', + 'www.google.co.nz', + 'www.google.co.th', + 'www.google.co.tz', + 'www.google.co.ug', + 'www.google.co.uz', + 'www.google.co.ve', + 'www.google.co.zm', + 'www.google.co.zw', + 'www.google.com.af', + 'www.google.com.ar', + 'www.google.com.bd', + 'www.google.com.bh', + 'www.google.com.bo', + 'www.google.com.br', ';', ]; From 14b1ed40b3500946db60848ddca47fc8c65cc396 Mon Sep 17 00:00:00 2001 From: Ratko Zagorac <90400759+zagi25@users.noreply.github.com> Date: Thu, 13 Jul 2023 13:22:01 +0200 Subject: [PATCH 2/3] Update CSP: prod.js --- acrobat/scripts/contentSecurityPolicy/prod.js | 91 ++++++++++++++++++- 1 file changed, 90 insertions(+), 1 deletion(-) diff --git a/acrobat/scripts/contentSecurityPolicy/prod.js b/acrobat/scripts/contentSecurityPolicy/prod.js index 8435c0e..40c1cfd 100644 --- a/acrobat/scripts/contentSecurityPolicy/prod.js +++ b/acrobat/scripts/contentSecurityPolicy/prod.js @@ -38,6 +38,22 @@ const connectSrc = [ '*.typekit.net/', 'trial-eum-clienttons-s.akamaihd.net/', '*.akstat.io/', + '345-tti-184.mktoutil.com', + 'adservice.google.com', + 'rum.hlx.page', + 'us-central1-adaptive-growth.cloudfunctions.net', + 'ad.doubleclick.net', + 'cdnmd.global-cache.online', + 'ff.kis.v2.scr.kaspersky-labs.com', + 'gc.kes.v2.scr.kaspersky-labs.com', + 'gc.kis.v2.scr.kaspersky-labs.com', + 'me.kis.v2.scr.kaspersky-labs.com', + 'pagead2.googlesyndication.com', + 'tag-logger.demandbase.com', + 'tl.ytlogs.ru', + 'tr.snapchat.com', + 'trial-eum-clienttons-s.akamaihd.net', + 'www.google.com', ';', ]; @@ -53,6 +69,9 @@ const defaultSrc = [ const fontSrc = [ '\'self\'', 'use.typekit.net', + 'assets.merci-app.com', + 'fonts.bunny.net', + 'fonts.gstatic.com', ';', ]; @@ -78,7 +97,6 @@ const frameSrc = [ 'bid.g.doubleclick.net', 'dc-api.adobecontent.io', 'documentcloud.adobe.com', - 'acrobat.adobe.com', 'servedby.flashtalking.com', 'tr.snapchat.com/', 'tr6.snapchat.com/', @@ -87,6 +105,16 @@ const frameSrc = [ 'vimeo.com', 'www.facebook.com', 'www.youtube.com', + 's.company-target.com', + 'accessdenied.pnc.com', + 'gateway.zscaler.net', + 'gateway.zscalertwo.net', + 'gateway.zscloud.net', + 'pixel.everesttech.net', + 'safe.menlosecurity.com', + 'td.doubleclick.net', + 'trendlavida.com', + 'zswpmanager.wip.mmc.com', ';', ]; @@ -135,6 +163,67 @@ const imgSrc = [ 'milo.adobe.com', 'p.typekit.net', 's.tgm.yahoo-net.jp', + 'l.clicktale.net', + 'www.google.ca', + 'www.google.co.kr', + 'www.google.co.uk', + 'www.google.co.za', + 'www.google.com', + 'www.google.com.mx', + 'www.google.com.sa', + 'www.google.com.tr', + 'www.google.com.tw', + 'www.google.de', + 'www.google.fr', + 'www.google.it', + 'adservice.google.com', + 'analytics.tiktok.com', + 'analytics.twitter.com', + 'c.clicktale.net', + 'googleads.g.doubleclick.net', + 'id.rlcdn.com', + 'mir-s3-cdn-cf.behance.net', + 't.co', + 'translate.google.com', + 'www.facebook.com', + 'www.google.ae', + 'www.google.al', + 'www.google.at', + 'www.google.az', + 'www.google.ba', + 'www.google.be', + 'www.google.bg', + 'www.google.bi', + 'www.google.bs', + 'www.google.bt', + 'www.google.by', + 'www.google.cd', + 'www.google.ci', + 'www.google.cl', + 'www.google.cm', + 'www.google.co.ao', + 'www.google.co.bw', + 'www.google.co.cr', + 'www.google.co.id', + 'www.google.co.il', + 'www.google.co.ke', + 'www.google.co.ls', + 'www.google.co.ma', + 'www.google.co.mz', + 'www.google.co.nz', + 'www.google.co.th', + 'www.google.co.tz', + 'www.google.co.ug', + 'www.google.co.uz', + 'www.google.co.ve', + 'www.google.co.zm', + 'www.google.co.zw', + 'www.google.com.af', + 'www.google.com.ar', + 'www.google.com.bd', + 'www.google.com.bh', + 'www.google.com.bo', + 'www.google.com.br', ';', ]; From 71541a964a3e189e6d0aacda2e70e009bda0e854 Mon Sep 17 00:00:00 2001 From: Ratko Zagorac <90400759+zagi25@users.noreply.github.com> Date: Thu, 13 Jul 2023 13:22:02 +0200 Subject: [PATCH 3/3] Update CSP: stage.js --- .../scripts/contentSecurityPolicy/stage.js | 89 +++++++++++++++++++ 1 file changed, 89 insertions(+) diff --git a/acrobat/scripts/contentSecurityPolicy/stage.js b/acrobat/scripts/contentSecurityPolicy/stage.js index 89ad5af..91b6df4 100644 --- a/acrobat/scripts/contentSecurityPolicy/stage.js +++ b/acrobat/scripts/contentSecurityPolicy/stage.js @@ -45,6 +45,22 @@ const connectSrc = [ '*.hlx.live', 'cdn.linkedin.oribi.io', '*.akstat.io/', + '345-tti-184.mktoutil.com', + 'adservice.google.com', + 'rum.hlx.page', + 'us-central1-adaptive-growth.cloudfunctions.net', + 'ad.doubleclick.net', + 'cdnmd.global-cache.online', + 'ff.kis.v2.scr.kaspersky-labs.com', + 'gc.kes.v2.scr.kaspersky-labs.com', + 'gc.kis.v2.scr.kaspersky-labs.com', + 'me.kis.v2.scr.kaspersky-labs.com', + 'pagead2.googlesyndication.com', + 'tag-logger.demandbase.com', + 'tl.ytlogs.ru', + 'tr.snapchat.com', + 'trial-eum-clienttons-s.akamaihd.net', + 'www.google.com', ';', ]; @@ -59,6 +75,9 @@ const defaultSrc = [ const fontSrc = [ '\'self\'', 'use.typekit.net', + 'assets.merci-app.com', + 'fonts.bunny.net', + 'fonts.gstatic.com', ';', ]; @@ -94,6 +113,16 @@ const frameSrc = [ 'vimeo.com', 'www.facebook.com', 'www.youtube.com', + 's.company-target.com', + 'accessdenied.pnc.com', + 'gateway.zscaler.net', + 'gateway.zscalertwo.net', + 'gateway.zscloud.net', + 'pixel.everesttech.net', + 'safe.menlosecurity.com', + 'td.doubleclick.net', + 'trendlavida.com', + 'zswpmanager.wip.mmc.com', ';', ]; @@ -142,6 +171,66 @@ const imgSrc = [ 'http://localhost:6456/', '*.hlx.page', '*.hlx.live', + 'l.clicktale.net', + 'www.google.ca', + 'www.google.co.kr', + 'www.google.co.uk', + 'www.google.co.za', + 'www.google.com', + 'www.google.com.mx', + 'www.google.com.sa', + 'www.google.com.tr', + 'www.google.com.tw', + 'www.google.de', + 'www.google.fr', + 'www.google.it', + 'adservice.google.com', + 'analytics.tiktok.com', + 'analytics.twitter.com', + 'googleads.g.doubleclick.net', + 'id.rlcdn.com', + 'mir-s3-cdn-cf.behance.net', + 't.co', + 'translate.google.com', + 'www.facebook.com', + 'www.google.ae', + 'www.google.al', + 'www.google.at', + 'www.google.az', + 'www.google.ba', + 'www.google.be', + 'www.google.bg', + 'www.google.bi', + 'www.google.bs', + 'www.google.bt', + 'www.google.by', + 'www.google.cd', + 'www.google.ci', + 'www.google.cl', + 'www.google.cm', + 'www.google.co.ao', + 'www.google.co.bw', + 'www.google.co.cr', + 'www.google.co.id', + 'www.google.co.il', + 'www.google.co.ke', + 'www.google.co.ls', + 'www.google.co.ma', + 'www.google.co.mz', + 'www.google.co.nz', + 'www.google.co.th', + 'www.google.co.tz', + 'www.google.co.ug', + 'www.google.co.uz', + 'www.google.co.ve', + 'www.google.co.zm', + 'www.google.co.zw', + 'www.google.com.af', + 'www.google.com.ar', + 'www.google.com.bd', + 'www.google.com.bh', + 'www.google.com.bo', + 'www.google.com.br', ';', ];