Improve security: HSTS, Force SSL, CSP

app/assets/javascripts/init.coffee

@@ -0,0 +1,23 @@
+window.App ||= {}
+
+cm = null
+
+loadCodeMirror = ->
+  $('#translationNav li:first').addClass('active')
+  $("textarea").each ->
+    cm = CodeMirror.fromTextArea($(this).get(0), {
+      lineNumbers: false,
+      lineWrapping: true,
+      mode: "text/html"
+    })
+
+App.init = ->
+  MathJax.Hub.Queue(["Typeset",MathJax.Hub]);
+  loadCodeMirror();
+
+$(document).on "turbolinks:load", ->
+  App.init()
+
+$(document).on "click", '#translationNav a[href="#preview"]', ->
+  $('#preview .problem-content').html(cm.getValue())
+  MathJax.Hub.Queue(["Typeset",MathJax.Hub]);