rwjblue/ember-cli-content-security-policy — pull request #20 by givanse (2014-11-27 16:00:28+00:00)
Title: list directives in a list instead of a long string

Same intent as in https://github.com/rwjblue/ember-cli-content-security-policy/pull/15, but coming from a branch and with a couple of tweaks.

Instead of:

'script-src': "'self' https://cdn.mxpnl.com https://cdn.foobar.com"

Do:

'script-src': ["'self'",
"https://cdn.mxpnl.com",
"https://cdn.foobar.com"]

Handles:

contentSecurityPolicy: {
'style-src': ["'self'", "'unsafe-inline'"],
'frame-src': "'self' http://disqus.com"
}

And prints a deprecation warning to the server.