fix csp again & remove console logs

TransDB-de · Aug 14, 2024 · b1ae87d · b1ae87d
1 parent fcd5023
commit b1ae87d
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 5 deletions.
diff --git a/src/hooks/index.ts b/src/hooks/index.ts
@@ -5,7 +5,7 @@ const secret = process.env["CSRF_TOKEN_SECRET"] as string ?? "";
 const secretExpires = process.env["CSRF_TOKEN_EXPIRES_IN"] as string ?? "";
 
 const prod = process.env["NODE_ENV"] === "production";
-const umamiURL = process.env["UMAMI_SRC"] ? new URL(process.env["UMAMI_SRC"]).host : "";
+const umamiURL = process.env["UMAMI_SRC"] ? new URL(process.env["UMAMI_SRC"]).origin : "";
 const cspConnectSrc = `connect-src 'self' ${process.env["AXIOS_BASE_URL"]} ${umamiURL}`;
 
 const config = {
@@ -30,7 +30,7 @@ export const getSession: GetSession = (request) => {
 			{ expiresIn: secretExpires }
 		);
 	}
-	console.log(config);
+
 	return {
 		csrfToken: csrfToken,
 		...config

diff --git a/src/routes/__layout.svelte b/src/routes/__layout.svelte
@@ -26,8 +26,7 @@
 		let noTrack = ["/manage", "/login"].includes(path) || Boolean(get(token));
 		
 		if (!noTrack && browser && config.umami_src) {
-			const res = await umami.track();
-			console.log(res)
+			await umami.track();
 		}
 		
 		return {

diff --git a/svelte.config.js b/svelte.config.js
@@ -54,7 +54,7 @@ const config = {
 				"default-src": ["none"],
 				"font-src": ["self"],
 				"img-src": ["self"],
-				"script-src": ["self", process.env["UMAMI_SRC"] ? new URL(process.env["UMAMI_SRC"]).host : ""],
+				"script-src": ["self", "https://umami.transdb.de"],
 				"style-src": ["self", "unsafe-inline"]
 			} : {}
 		}