From 6a9f68083502ce9d083c19f3f041d69bfb6e17c2 Mon Sep 17 00:00:00 2001
From: jfoclpf <joao.pimentel.ferreira@gmail.com>
Date: Sat, 29 Jun 2019 22:44:48 +0200
Subject: [PATCH] add CSP

---
 www/index.html           | 4 ++--
 www/js/res/authTest.html | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/www/index.html b/www/index.html
index e093578..772e41f 100644
--- a/www/index.html
+++ b/www/index.html
@@ -8,11 +8,11 @@
   <link rel="icon" href="favicon.ico" type="image/x-icon">
 
   <meta http-equiv="Content-Security-Policy" content="
-    default-src 'self' data: file: gap: ms-appdata: https://ssl.gstatic.com 'unsafe-eval' https://developers.google.com https://ssl.gstatic.com https://maps.googleapis.com https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://fonts.gstatic.com 'unsafe-eval';
+    default-src 'self' data: file: gap: ms-appdata: https://ssl.gstatic.com 'unsafe-eval' https://developers.google.com https://ssl.gstatic.com https://maps.googleapis.com https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://fonts.gstatic.com https://cmd.autenticacao.gov.pt https://frtend.reg.cmd.autenticacao.gov.pt 'unsafe-eval';
     style-src 'self' https://fonts.googleapis.com https://stackpath.bootstrapcdn.com 'unsafe-inline';
     media-src file: *;
     img-src 'self' https://maps.googleapis.com data: file: content: https://csi.gstatic.com;
-    script-src 'self' data: content: file: https://ssl.gstatic.com https://maps.googleapis.com https://developers.google.com https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://code.jquery.com
+    script-src 'self' data: content: file: https://ssl.gstatic.com https://maps.googleapis.com https://developers.google.com https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://cmd.autenticacao.gov.pt https://frtend.reg.cmd.autenticacao.gov.pt https://code.jquery.com
   ">
 
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
diff --git a/www/js/res/authTest.html b/www/js/res/authTest.html
index 0e43f14..532dc56 100644
--- a/www/js/res/authTest.html
+++ b/www/js/res/authTest.html
@@ -105,7 +105,7 @@
 <input type="hidden" name="__EVENTTARGET" id="__EVENTTARGET" value="" />
 <input type="hidden" name="__EVENTARGUMENT" id="__EVENTARGUMENT" value="" />
 
-<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="https://frtend.reg.cmd.autenticacao.gov.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" />
+<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="https://frtend.reg.cmd.autenticacao.gov.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" />
 </div>
 
 <script type="text/javascript">