feat: added csp and minor changes

frontend-v2/index.html

@@ -4,6 +4,21 @@
     <meta charset="UTF-8" />
     <link rel="icon" href="/infisical.ico" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <meta
+      http-equiv="Content-Security-Policy"
+      content="
+    default-src 'self'; 
+    connect-src 'self' https://*.posthog.com http://127.0.0.1:* https://cdn.jsdelivr.net/npm/@lottiefiles/[email protected]/dist/dotlottie-player.wasm; 
+    script-src 'self' https://*.posthog.com https://js.stripe.com https://api.stripe.com https://widget.intercom.io https://js.intercomcdn.com https://hcaptcha.com https://*.hcaptcha.com 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net/npm/@lottiefiles/[email protected]/dist/dotlottie-player.wasm; 
+    style-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com; 
+    child-src https://api.stripe.com; 
+    frame-src https://js.stripe.com/ https://api.stripe.com https://www.youtube.com/ https://hcaptcha.com https://*.hcaptcha.com; 
+    connect-src 'self' wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://api.heroku.com/ https://id.heroku.com/oauth/authorize https://id.heroku.com/oauth/token https://checkout.stripe.com https://app.posthog.com https://api.stripe.com https://api.pwnedpasswords.com http://127.0.0.1:* https://hcaptcha.com https://*.hcaptcha.com; 
+    img-src 'self' https://static.intercomassets.com https://js.intercomcdn.com https://downloads.intercomcdn.com https://*.stripe.com https://i.ytimg.com/ data:; 
+    media-src https://js.intercomcdn.com; 
+    font-src 'self' https://fonts.intercomcdn.com/  https://fonts.gstatic.com; 
+  "
+    />
     <title>Infisical</title>
   </head>
   <body>

frontend-v2/src/components/auth/TeamInviteStep.tsx

@@ -101,4 +101,3 @@ export default function TeamInviteStep(): JSX.Element {
     </div>
   );
 }
-

frontend-v2/src/components/license/UpgradePlanModal/UpgradePlanModal.tsx

@@ -68,4 +68,4 @@ export const UpgradePlanModal = ({ text, isOpen, onOpenChange }: Props): JSX.Ele
       </ModalContent>
     </Modal>
   );
-};
+};

frontend-v2/src/pages/admin/OverviewPage/route.tsx

@@ -1,9 +1,7 @@
-import { createFileRoute } from '@tanstack/react-router'
+import { createFileRoute } from "@tanstack/react-router";
 
-import { OverviewPage } from './OverviewPage'
+import { OverviewPage } from "./OverviewPage";
 
-export const Route = createFileRoute(
+export const Route = createFileRoute("/_authenticate/_inject-org-details/admin/_admin-layout/")({
-  '/_authenticate/_inject-org-details/admin/_admin-layout/',
+  component: OverviewPage
-)({
+});
-  component: OverviewPage,
-})

frontend-v2/src/pages/admin/layout.tsx

@@ -1,16 +1,14 @@
-import { createFileRoute, redirect } from '@tanstack/react-router'
+import { createFileRoute, redirect } from "@tanstack/react-router";
 
-import { AdminLayout } from '@app/layouts/AdminLayout'
+import { AdminLayout } from "@app/layouts/AdminLayout";
 
-export const Route = createFileRoute(
+export const Route = createFileRoute("/_authenticate/_inject-org-details/admin/_admin-layout")({
-  '/_authenticate/_inject-org-details/admin/_admin-layout',
-)({
   component: AdminLayout,
   beforeLoad: ({ context }) => {
     if (!context.user.superAdmin) {
       throw redirect({
-        to: '/organization/secret-manager/overview',
+        to: "/organization/secret-manager/overview"
-      })
+      });
     }
-  },
+  }
-})
+});

frontend-v2/src/pages/auth/LoginLdapPage/route.tsx

@@ -1,7 +1,17 @@
-import { createFileRoute } from "@tanstack/react-router";
+import { createFileRoute, stripSearchParams } from "@tanstack/react-router";
+import { zodValidator } from "@tanstack/zod-adapter";
+import { z } from "zod";
 
 import { LoginLdapPage } from "./LoginLDAPPage";
 
+const LoginLdapPageQueryParamsSchema = z.object({
+  organizationSlug: z.string().catch("")
+});
+
 export const Route = createFileRoute("/_restrict-login-signup/login/ldap")({
-  component: LoginLdapPage
+  component: LoginLdapPage,
+  validateSearch: zodValidator(LoginLdapPageQueryParamsSchema),
+  search: {
+    middlewares: [stripSearchParams({ organizationSlug: "" })]
+  }
 });

frontend-v2/src/pages/auth/LoginPage/Login.utils.tsx

@@ -46,4 +46,3 @@ export const useNavigateToSelectOrganization = () => {
 
   return { navigateToSelectOrganization };
 };
-

frontend-v2/src/pages/auth/SignUpSsoPage/components/EmailConfirmationStep/EmailConfirmationStep.tsx

@@ -187,4 +187,4 @@ export const EmailConfirmationStep = ({
       </div>
     </div>
   );
-};
+};