Merge pull request #851 from ente-io/add-secondary-bucket-csp
Add the URL of the secondary hot storage in the CSP whitelist
This commit is contained in:
commit
976863129e
|
@ -26,7 +26,7 @@ module.exports = {
|
||||||
'style-src': "'self' 'unsafe-inline'",
|
'style-src': "'self' 'unsafe-inline'",
|
||||||
'font-src ': "'self'; script-src 'self' 'unsafe-eval' blob:",
|
'font-src ': "'self'; script-src 'self' 'unsafe-eval' blob:",
|
||||||
'connect-src':
|
'connect-src':
|
||||||
"'self' https://*.ente.io http://localhost:8080 data: blob: https://ente-prod-eu.s3.eu-central-003.backblazeb2.com ",
|
"'self' https://*.ente.io http://localhost:8080 data: blob: https://ente-prod-eu.s3.eu-central-003.backblazeb2.com https://ente-prod-v3.s3.eu-central-2.wasabisys.com/",
|
||||||
'base-uri ': "'self'",
|
'base-uri ': "'self'",
|
||||||
// to allow worker
|
// to allow worker
|
||||||
'child-src': "'self' blob:",
|
'child-src': "'self' blob:",
|
||||||
|
|
|
@ -8,5 +8,5 @@
|
||||||
X-Frame-Options: deny
|
X-Frame-Options: deny
|
||||||
X-XSS-Protection: 1; mode=block
|
X-XSS-Protection: 1; mode=block
|
||||||
Referrer-Policy: same-origin
|
Referrer-Policy: same-origin
|
||||||
Content-Security-Policy-Report-Only: default-src 'self'; img-src 'self' blob: data:; media-src 'self' blob:; style-src 'self' 'unsafe-inline'; font-src 'self'; script-src 'self' 'unsafe-eval' blob:; manifest-src 'self'; child-src 'self' blob:; object-src 'none'; connect-src 'self' https://*.ente.io data: blob: https://ente-prod-eu.s3.eu-central-003.backblazeb2.com ; base-uri 'self'; frame-ancestors 'none'; form-action 'none'; report-uri https://csp-reporter.ente.io; report-to https://csp-reporter.ente.io;
|
Content-Security-Policy-Report-Only: default-src 'self'; img-src 'self' blob: data:; media-src 'self' blob:; style-src 'self' 'unsafe-inline'; font-src 'self'; script-src 'self' 'unsafe-eval' blob:; manifest-src 'self'; child-src 'self' blob:; object-src 'none'; connect-src 'self' https://*.ente.io data: blob: https://ente-prod-eu.s3.eu-central-003.backblazeb2.com https://ente-prod-v3.s3.eu-central-2.wasabisys.com/ ; base-uri 'self'; frame-ancestors 'none'; form-action 'none'; report-uri https://csp-reporter.ente.io; report-to https://csp-reporter.ente.io;
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue