LATEST TRANSMISSIONS

ENCRYPTED // PUBLIC KEY DETECTED

FILTER: TAG [Content-Security-Policy]
ONLINE
// Z.SHINCHVEN

解决 Node 应用接入企业微信登录不显示二维码的问题

我在使用 Ant Design Pro 和 FeathersJS 开发一个支持企业微信二维码登录的应用。这个功能之前很顺利地完成过，而这次总是无法加载出二维码。 经过排查是 FeathersJS 使用的 helmet 库升级了安全策略，默认禁用了站外资源。 要顺利加载企业微信的二维码，需要调整降低安全策略。 app.use(helmet({ contentSecurityPolicy: fal…

Node.jsFeathersJShelmet.jsContent-Security-Policysecuritycors企业微信
Read
// Z.SHINCHVEN

Allow Everything in Page Content Security Policy

Content got blocked by Content-Security-Policy? No problem, just allow everything. And of course, this is really a bad practice. <meta http-equiv="Content-Security-Policy" content="default-src * se…

Content-Security-Policysecurity
Read