fix: only enable dropbox directives when config is given

Signed-off-by: Max Wu <[email protected]>

Author: jackycute

Diff for: lib/csp.js

@@ -41,7 +41,7 @@ CspStrategy.computeDirectives = function () {
   mergeDirectives(directives, config.csp.directives)
   mergeDirectivesIf(config.csp.addDefaults, directives, defaultDirectives)
   mergeDirectivesIf(config.useCDN, directives, cdnDirectives)
-  mergeDirectivesIf(config.dropbox.appKey, directives, dropboxDirectives)
+  mergeDirectivesIf(config.dropbox && config.dropbox.appKey, directives, dropboxDirectives)
   mergeDirectivesIf(config.csp.addDisqus, directives, disqusDirectives)
   mergeDirectivesIf(config.csp.addGoogleAnalytics, directives, googleAnalyticsDirectives)
   if (!areAllInlineScriptsAllowed(directives)) {