kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-05-18 10:40:33 +02:00
Code Issues Packages Projects Releases Wiki Activity

Optimized more CSP policies

Browse Source
This commit is contained in:
Kevin Veen-Birkenbach 2025-05-15 11:00:13 +02:00
parent 6b7314baac
commit 1031b61f6a
No known key found for this signature in database
GPG Key ID: 44D8F11FD62F878E
4 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
filter_plugins/csp_filters.py
View File

@ -91,7 +91,8 @@ class FilterModule(object):
'frame-src', 'frame-src',
'script-src', 'script-src',
'style-src', 'style-src',
'font-src' 'font-src',
'worker-src',
] ]
parts = [] parts = []

5
roles/docker-nextcloud/vars/configuration.yml
View File

@ -5,6 +5,11 @@ csp:
flags: flags:
style-src: style-src:
unsafe-inline: true unsafe-inline: true
script-src:
unsafe-inline: true
whitelist:
font-src:
- data:
oidc: oidc:
enabled: "{{ applications.nextcloud.features.oidc | default(true) }}" # Activate OIDC for Nextcloud enabled: "{{ applications.nextcloud.features.oidc | default(true) }}" # Activate OIDC for Nextcloud
# floavor decides which OICD plugin should be used. # floavor decides which OICD plugin should be used.

2
roles/docker-portfolio/vars/configuration.yml
View File

@ -17,5 +17,5 @@ csp:
frame-src: frame-src:
- "{{ web_protocol }}://*.{{primary_domain}}" - "{{ web_protocol }}://*.{{primary_domain}}"
flags: flags:
style-src-elem: style-src:
unsafe-inline: true unsafe-inline: true

3
roles/docker-wordpress/vars/configuration.yml
View File

@ -22,3 +22,6 @@ csp:
unsafe-inline: true unsafe-inline: true
script-src: script-src:
unsafe-inline: true unsafe-inline: true
whitelist:
worker-src:
- blob: