CSP: allow Crossmark snippet

SciPost_v1/settings/base.py

@@ -199,6 +199,7 @@ CSP_FONT_SRC = ("'self'", 'scipost.org', "'report-sample'",
                 'data:', 'fonts.gstatic.com', 'cdnjs.cloudflare.com',
                 'www.google.com', 'themes.googleusercontent.com')
 CSP_FRAME_SRC = ("'self'", 'scipost.org', "'report-sample'",
+                 'crossmark.crossref.org',
                  'www.google.com', 'player.vimeo.com', 'www.recaptcha.net', 'www.mendeley.com')
 CSP_IMG_SRC = ("'self'", 'scipost.org', "'report-sample'",
                'data:', 'ajax.googleapis.com', 'assets.crossref.org',
@@ -209,6 +210,7 @@ CSP_SCRIPT_SRC = ("'self'", 'scipost.org', "'report-sample'",
                   'www.recaptcha.net', 'www.gstatic.com',
                   'code.jquery.com')
 CSP_STYLE_SRC = ("'self'", 'scipost.org', "'report-sample'",
+                 'crossmark-cdn.crossref.org',
                  "'unsafe-inline'", 'ajax.googleapis.com', 'code.jquery.com',
                  'fonts.googleapis.com', 'cdnjs.cloudflare.com')
 CSP_INCLUDE_NONCE_IN = ('script-src',)

journals/templates/partials/journals/publication_summary.html

@@ -2,14 +2,14 @@
 
 <div class="row">
   <div class="col-12">
-    <h2 class="text-blue">{{publication.title}}{% if publication.status == 'draft' %} <label class="label label-warning label-sm">{{ publication.get_status_display }}</label>{% endif %}
+    <h2 class="text-blue">{{ publication.title }}{% if publication.status == 'draft' %} <label class="label label-warning label-sm">{{ publication.get_status_display }}</label>{% endif %}
     </h2>
 
     <p class="mb-1">{{ publication.author_list }}</p>
     <p class="text-muted mb-0">
       {{ publication.citation }} &middot; published {{ publication.publication_date|date:'j F Y' }}
       {% if publication.cc_license != 'CC BY 4.0' %}
-        &middot; licensed under {{publication.get_cc_license_display}}
+        &middot; licensed under {{ publication.get_cc_license_display }}
       {% endif %}
 
       {% if user.is_authenticated %}
@@ -20,9 +20,9 @@
     </p>
 
     <ul class="publicationClickables mt-3">
-      <li>doi:  {{publication.doi_string}}</li>
+      <li>doi:  {{ publication.doi_string }}</li>
       <li class="publicationPDF">
-        <a href="{{publication.get_absolute_url}}/pdf" target="_blank">pdf</a>
+        <a href="{{ publication.get_absolute_url }}/pdf" target="_blank">pdf</a>
       </li>
       <li><button type="button" class="btn btn-link p-0" data-toggle="modal" data-target="#bibtextmodal">BiBTeX</button></li>
       <li><button type="button" class="btn btn-link p-0" data-toggle="modal" data-target="#rismodal">RIS</button></li>
@@ -74,7 +74,7 @@
             <span aria-hidden="true">&times;</span>
           </button>
         </div>
-        <div><pre><code>{{publication.BiBTeX_entry|linebreaksbr}}</code></pre></div>
+        <div><pre><code>{{ publication.BiBTeX_entry|linebreaksbr }}</code></pre></div>
       </div>
     </div>
   </div>