From 689715109edd8a40c6d4354ad5cf7ae1698858d0 Mon Sep 17 00:00:00 2001
From: Timmy Willison <timmywil@users.noreply.github.com>
Date: Sat, 14 Dec 2024 16:08:02 -0500
Subject: [PATCH 1/3] jqueryui.com: add CSP exceptions for themeroller

Ref https://github.com/jquery/infrastructure-puppet/issues/54
Ref gh-474
---
 themes/jqueryui.com/functions.php | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/themes/jqueryui.com/functions.php b/themes/jqueryui.com/functions.php
index 998bdc73..a4788a0c 100644
--- a/themes/jqueryui.com/functions.php
+++ b/themes/jqueryui.com/functions.php
@@ -1,3 +1,12 @@
 <?php
 
 require_once __DIR__ . '/functions.content.php';
+
+// Allow inline scripts on https://jqueryui.com/themeroller/
+// Load styles from download.jqueryui.com on https://jqueryui.com/themeroller/
+// Load images from download.jqueryui.com on https://jqueryui.com/themeroller/
+add_filter( 'jq_content_security_policy', function ( $policy ) {
+	$policy[ 'style-src' ] = "'self' 'unsafe-inline' code.jquery.com download.jqueryui.com";
+	$policy[ 'img-src' ] = "'self' data: code.jquery.com download.jqueryui.com";
+	return $policy;
+} );

From 8905e99127e318da098c97fe60b6c82b3023d2be Mon Sep 17 00:00:00 2001
From: Timmy Willison <timmywil@users.noreply.github.com>
Date: Sat, 14 Dec 2024 16:14:30 -0500
Subject: [PATCH 2/3] releases.jquery.com: fix close button icon during
 hover/active

Ref https://github.com/jquery/infrastructure-puppet/issues/54
Ref gh-474
---
 themes/jquery/css/sri-modal.css | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/themes/jquery/css/sri-modal.css b/themes/jquery/css/sri-modal.css
index ea862499..2b9f5dcf 100644
--- a/themes/jquery/css/sri-modal.css
+++ b/themes/jquery/css/sri-modal.css
@@ -35,7 +35,9 @@
 	right: 28px;
 }
 
-.sri-modal .ui-icon-closethick {
+.sri-modal .ui-icon-closethick,
+.sri-modal .ui-button:hover .ui-icon-closethick,
+.sri-modal .ui-button:active .ui-icon-closethick {
 	background: url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAMAAAAoLQ9TAAAAclBMVEUAAADMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMxg1ZvWAAAAJXRSTlMAAQIDBAUGCQsNDhQWGSg4g4uUoKOoq62vsLW8wMrO2tzk5ujxm/5xbwAAAGxJREFUGBmNwVcWgkAQRcFHg4FgzjomZu7+t+hpRv6p0iS7byPJTs+5BluIjewML5O7A3F1AdJMrgpkqVVWBVxqNVriNhrZDRdrZXYl62sNjkBaB6Cv5PaQOpUB3iZXHFInqXx8FvozDQpN8gNoXAtiMhPWmQAAAABJRU5ErkJggg==) 0 0;
 }
 

From 3d9935ce8d283161c118c767dce91b1d7d5080ae Mon Sep 17 00:00:00 2001
From: Timmy Willison <timmywil@users.noreply.github.com>
Date: Sat, 14 Dec 2024 17:47:56 -0500
Subject: [PATCH 3/3] api.jquery.com: add CSP exception for flickr for
 /jQuery.getJSON

Ref https://github.com/jquery/infrastructure-puppet/issues/54
Closes gh-474
---
 themes/api.jquery.com/functions.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/themes/api.jquery.com/functions.php b/themes/api.jquery.com/functions.php
index e95f4365..1a47f39a 100644
--- a/themes/api.jquery.com/functions.php
+++ b/themes/api.jquery.com/functions.php
@@ -1,8 +1,10 @@
 <?php
 
 // Allow inline scripts and styles in API demos
+// Allow flickr script and images on https://api.jquery.com/jQuery.getJSON/
 add_filter( 'jq_content_security_policy', function ( $policy ) {
-	$policy[ 'script-src' ] = "'self' 'unsafe-inline' code.jquery.com";
+	$policy[ 'script-src' ] = "'self' 'unsafe-inline' code.jquery.com api.flickr.com";
 	$policy[ 'style-src' ] = "'self' 'unsafe-inline' code.jquery.com";
+	$policy[ 'img-src' ] = "'self' data: code.jquery.com live.staticflickr.com";
 	return $policy;
 } );