[x/go.dev] all: update CSP header to include golang.org as a connect-src

The site attempts to fetch the latest version of Go using a
CORS request to golang.org/dl/?mode=json, but doing so is currently
not permitted with the current CSP values. Update them to allow
connection to golang.org.

Also fixes retrieval logic to await the JSON response, since it
returns a promise, and properly sorts the versions.

Change-Id: If88bb3b12d097909e1f89c074b6726c12580470f
X-GoDev-Commit: 6e3d3fb4e7b9fb9e9f84235ce4283a8b43990a58
6 files changed
tree: e55f18250926c7df93d3b2e7df55c4a77b901354
  1. go.dev/
  2. AUTHORS
  3. CONTRIBUTING.md
  4. CONTRIBUTORS
  5. LICENSE
  6. PATENTS
  7. README.md
README.md

Go Website

This repository holds the Go Website server code and content.

Download/Install

The easiest way to install is to run go get -u golang.org/x/website. You can also manually git clone the repository to $GOPATH/src/golang.org/x/website.

Report Issues / Send Patches

This repository uses Gerrit for code changes. To learn how to submit changes to this repository, see https://golang.org/doc/contribute.html.

The main issue tracker for the time repository is located at https://github.com/golang/go/issues. Prefix your issue with “x/website:” in the subject line, so it is easy to find.