]> git.immae.eu Git - github/Chocobozzz/PeerTube.git/commit - server.ts
add Content Security Policy (#1252)
authorRigel Kent <par@rigelk.eu>
Thu, 13 Dec 2018 08:49:45 +0000 (09:49 +0100)
committerChocobozzz <me@florianbigard.com>
Thu, 13 Dec 2018 08:49:45 +0000 (09:49 +0100)
commit5e755fff9d70a7fd3c4f85bb524f1b774dd85b25
tree699a0724de91f4151ec7d67b700f5b7736a78e45
parent9ecac97be024cf2277872986950d7eec85cbc76e
add Content Security Policy (#1252)

* add Content Security Policy

* remove reflect-metadata on production builds to get rid of unsafe-eval

* fix baseCSP usage

* add SRI to CSP

* add blob: to media-src

* remove SRI

* CSP set to reportOnly

* adding data: to connect-src CSP

* remove block-all-mixed-content

* add report-uri support
client/src/environments/environment.ts
client/src/polyfills.ts
config/default.yaml
config/production.yaml.example
server.ts
server/controllers/client.ts
server/initializers/constants.ts
server/middlewares/csp.ts [new file with mode: 0644]
server/middlewares/dnt.ts
server/middlewares/index.ts
support/docker/production/config/custom-environment-variables.yaml