Better default list of world writable domains in CSP checker (#3165)

Co-authored-by: noamblitz <[email protected]> Co-authored-by: ammar92 <[email protected]> Co-authored-by: Jeroen Dekkers <[email protected]>
minvws · Jul 8, 2024 · 7c68d0a · 7c68d0a
1 parent 2bbc4c4
commit 7c68d0a
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/octopoes/bits/ask_disallowed_domains/question_schema.json b/octopoes/bits/ask_disallowed_domains/question_schema.json
@@ -3,14 +3,13 @@
   "$id": "/bit/disallowed-csp-hostnames",
   "type": "object",
   "default": {},
-  "Port Configuration": "Root Schema",
   "required": [],
   "properties": {
     "disallowed_hostnames": {
       "description": "Comma separated list of disallowed hostnames in CSP headers",
       "type": "string",
       "pattern": "^(\\s*(,*)[^,]+,?\\s*)*$",
-      "default": "github.com,google.com"
+      "default": "githubpages.com,github.io,jsdelivr.com,cdn.skypack.dev"
     },
     "disallow_url_shorteners": {
       "description": "Do you want to disallow url shorteners in csp headers?",