Improve security: HSTS, Force SSL, CSP

app/assets/javascripts/application.js

@@ -20,5 +20,5 @@
 //= require codemirror/modes/css
 //= require codemirror/modes/javascript
 //= require codemirror/modes/htmlmixed
-//= require translations
-//= require_tree .
+//= require mathjax-config
+//= require init

app/assets/javascripts/init.coffee

@@ -1,6 +1,4 @@
-# Place all the behaviors and hooks related to the matching controller here.
-# All this logic will automatically be available in application.js.
-# You can use CoffeeScript in this file: http://coffeescript.org/
+window.App ||= {}
 
 cm = null
 
@@ -13,8 +11,12 @@ loadCodeMirror = ->
       mode: "text/html"
     })
 
-$(document).on "turbolinks:load", loadCodeMirror
+App.init = ->
+  MathJax.Hub.Queue(["Typeset",MathJax.Hub]);
+  loadCodeMirror();
 
+$(document).on "turbolinks:load", ->
+  App.init()
 
 $(document).on "click", '#translationNav a[href="#preview"]', ->
   $('#preview .problem-content').html(cm.getValue())

app/assets/javascripts/mathjax-config.js

@@ -0,0 +1,9 @@
+window.MathJax = {
+    jax: ["input/TeX", "output/HTML-CSS"],
+    tex2jax: {
+        inlineMath: [ ["$","$"], ["\\(","\\)"] ],
+        displayMath: [ ["$$","$$"], ["\\[","\\]"] ],
+        processEscapes: true
+    },
+    "HTML-CSS": { availableFonts: ["TeX"] }
+};

app/assets/javascripts/mathjax.js.coffee

@@ -1,2 +0,0 @@
-$(document).on 'turbolinks:load', ->
-  MathJax.Hub.Queue(["Typeset",MathJax.Hub]);