diff --git a/src/app/middleware.js b/src/app/middleware.js index 2a40a4d..ddf8057 100644 --- a/src/app/middleware.js +++ b/src/app/middleware.js @@ -39,7 +39,7 @@ exports.setHTTPResponseHeaders = async function(ctx, next) { ctx.set('Public-Key-Pins', `pin-sha256="${config.server.httpsKeyPin}"; pin-sha256="${config.server.httpsKeyPinBackup}"; max-age=16070400`); } // CSP - ctx.set('Content-Security-Policy', "default-src 'self'; object-src 'none'; script-src 'self' code.jquery.com; style-src 'self' maxcdn.bootstrapcdn.com; font-src 'self' maxcdn.bootstrapcdn.com"); + ctx.set('Content-Security-Policy', "default-src 'self'; object-src 'none'; script-src 'self' code.jquery.com; style-src 'self' stackpath.bootstrapcdn.com; font-src 'self' stackpath.bootstrapcdn.com"); // Prevent rendering website in foreign iframe (Clickjacking) ctx.set('X-Frame-Options', 'DENY'); // CORS diff --git a/src/static/index.html b/src/static/index.html index 229a95f..5a4b17c 100644 --- a/src/static/index.html +++ b/src/static/index.html @@ -8,7 +8,7 @@ Mailvelope Key Server - + @@ -20,7 +20,7 @@ @@ -41,8 +41,8 @@

No Web of Trust

No more key signing parties or publishing your social network online. You can even delete your public key at anytime. Learn more

-

Secure REST Api

-

The server offers a modern REST api over HTTPS with HSTS and public key pinning that can be integrated into any app architecture. Learn more

+

Secure REST API

+

The server offers a modern REST API over HTTPS with HSTS and public key pinning that can be integrated into any app architecture. Learn more

diff --git a/src/static/js/demo.js b/src/static/js/manage.js similarity index 100% rename from src/static/js/demo.js rename to src/static/js/manage.js diff --git a/src/static/ui.html b/src/static/manage.html similarity index 88% rename from src/static/ui.html rename to src/static/manage.html index 00f2a74..083ad36 100644 --- a/src/static/ui.html +++ b/src/static/manage.html @@ -8,7 +8,7 @@ Mailvelope Key Server - + @@ -20,7 +20,7 @@ @@ -95,13 +95,13 @@
  • Privacy
  • -

    © 2016 Mailvelope GmbH

    +

    © 2019 Mailvelope GmbH

    - - + +