kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-07-01 06:32:03 +02:00
Code Issues Packages Projects Releases Wiki Activity

optimized CSP for peertube

Browse Source
This commit is contained in:
Kevin Veen-Birkenbach 2025-06-30 18:10:19 +02:00
parent 02d478186c
commit 925f20f1e1
No known key found for this signature in database
GPG Key ID: 44D8F11FD62F878E
3 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
filter_plugins/csp_filters.py
View File

@ -96,6 +96,7 @@ class FilterModule(object):
'font-src', 'font-src',
'worker-src', 'worker-src',
'manifest-src', 'manifest-src',
'media-src',
] ]
parts = [] parts = []

4
roles/docker-peertube/vars/configuration.yml
View File

@ -16,6 +16,10 @@ csp:
whitelist: whitelist:
frame-ancestors: frame-ancestors:
- "*" - "*"
media-src:
- "blob:"
font-src:
- "data:"
domains: domains:
canonical: canonical:
- "video.{{ primary_domain }}" - "video.{{ primary_domain }}"

1
tests/integration/test_csp_configuration_consistency.py
View File

@ -15,6 +15,7 @@ class TestCspConfigurationConsistency(unittest.TestCase):
'font-src', 'font-src',
'worker-src', 'worker-src',
'manifest-src', 'manifest-src',
'media-src'
} }
SUPPORTED_FLAGS = {'unsafe-eval', 'unsafe-inline'} SUPPORTED_FLAGS = {'unsafe-eval', 'unsafe-inline'}