Add assessment documentation (#10)

* docs: add diagram for `SE_19`, `SE-20` * feat: add integrity to inline script/style * fix: add shas to csp * fix: wrap hashes in '' * fix: use sha256 * fix: fix sha * fix: sha * Update _headers * fix: update headers * Update index.html * Revert "Update index.html" This reverts commit 47d1a1c. * fix: reset header
WorkAroundHQ · Nov 14, 2021 · 5cfabab · 5cfabab
1 parent a29ee10
commit 5cfabab
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 7 deletions.
diff --git a/README.md b/README.md
@@ -61,13 +61,26 @@ The deployment process is simple:
 - Every push on `main` triggers a build on Netlify
 - Every open pull request with target `main`, creates a deploy preview on Netlify
 
-## Tech Stack
+## Architecture
 
-Frontend: [React](https://reactjs.org), [SCSS](https://sass-lang.com)
+![WorkAround-Architecture](https://user-images.githubusercontent.com/28442090/141678851-3a1a180d-dc42-4088-9eaa-1dfde476df6e.jpg)
 
-Backend: [Supabase](https://supabase.io)
+### Frontend
 
-Hosting: [Netlify](https://www.netlify.com)
+WorkAround is a Single Page Application developed with [`ReactJs`](https://reactjs.org) and [`SCSS`](https://sass-lang.com) as a CSS preprocessor.
+
+### Hosting
+
+WorkAround ist hosted on [`Netlify's`](https://www.netlify.com) CDN Network to provide fast loading times for users around the globe.
+
+### Backend
+
+[`Supabase`](https://supabase.io) provides three different services:
+- Database
+- Authentication / Authorization
+- Storage
+
+These services can be accessed via different REST endpoints, dynamically created by Supabase.
 
 ## Feedback
 

diff --git a/public/index.html b/public/index.html
@@ -13,14 +13,14 @@
 
     <link rel="apple-touch-icon" href="%PUBLIC_URL%/logo192.png" />
     <link rel="manifest" href="%PUBLIC_URL%/manifest.json" />
-    <link href="https://api.fontshare.com/css?f[]=satoshi@400,401,500,501,700,701,900,901&f[]=switzer@400,401,500,501,600,601,700,701,800,801,900,901&display=swap" rel="stylesheet">
+    <link rel="stylesheet" href="https://api.fontshare.com/css?f%5B%5D=satoshi@400,401,500,501,700,701,900,901&f%5B%5D=switzer@400,401,500,501,600,601,700,701,800,801,900,901&display=swap" integrity="sha256-83RPgNOk0dTUTN0RRMsHnAr4CbAS92gN/i0rNZdr948=" crossorigin="anonymous">
     <title>WorkAround</title>
   </head>
   <body>
     <noscript>You need to enable JavaScript to run this app.</noscript>
     <div id="root"></div>
-    <script type="module" src="https://unpkg.com/ionicons@5.5.2/dist/ionicons/ionicons.esm.js"></script>
-    <script nomodule src="https://unpkg.com/ionicons@5.5.2/dist/ionicons/ionicons.js"></script>
+    <script type="module" src="https://unpkg.com/ionicons@5.5.2/dist/ionicons/ionicons.esm.js" integrity="sha256-IBk3NtkA8LYCpnj4BGdjSXZFeKsq3NB//rttBt8a/ZY=" crossorigin="anonymous"></script>
+    <script nomodule src="https://unpkg.com/ionicons@5.5.2/dist/ionicons/ionicons.js" integrity="sha256-gUqVdClbOXKywRHaSlpDP2Xo5IsR+ZoGuW1eVUr5wk0=" crossorigin="anonymous"></script>
     <script async defer data-website-id="6aa2bf35-f14a-49f6-bb2b-ee5c347f3545" src="https://cukami.workaround.world/umami.js"></script>
   </body>
 </html>