Optimized CSP check

Todo.md

@@ -1,3 +1,4 @@
 # Todos
 - Implement multi language
-- Implement rbac administration interface
+- Implement rbac administration interface
+- Implement [cloudflare dev cache via API](https://chatgpt.com/share/689385e2-7744-800f-aa93-a6e811a245df)

group_vars/all/00_general.yml

@@ -47,7 +47,7 @@ certbot_credentials_dir:                  /etc/certbot
 certbot_credentials_file:                 "{{ certbot_credentials_dir }}/{{ certbot_acme_challenge_method }}.ini"
 certbot_dns_api_token:                    ""                      # Define in inventory file: More information here: group_vars/all/docs/CLOUDFLARE_API_TOKEN.md
 certbot_dns_propagation_wait_seconds:     40                      # How long should the script wait for DNS propagation before continuing
-certbot_flavor:                           san                     # Possible options: san (recommended, with a dns flavor like cloudflare, or hetzner), wildcard(doesn't function with www redirect), deicated
+certbot_flavor:                           san                     # Possible options: san (recommended, with a dns flavor like cloudflare, or hetzner), wildcard(doesn't function with www redirect), dedicated
 
 # Path where Certbot stores challenge webroot files
 letsencrypt_webroot_path: "/var/lib/letsencrypt/"

roles/srv-web-7-7-inj-port-ui-desktop/templates/iframe-handler.js.j2

@@ -3,12 +3,14 @@
   var allowedOrigin = "https://{{ domains | get_domain('web-app-port-ui') }}";
 
   function notifyParent() {
-    try {
-      window.parent.postMessage({
-        type: "iframeLocationChange",
-        href: window.location.href
-      }, allowedOrigin);
-    } catch (e) {}
+    if (window.self !== window.top) {
+      try {
+        window.parent.postMessage({
+          type: "iframeLocationChange",
+          href: window.location.href
+        }, allowedOrigin);
+      } catch (e) {}
+    }
   }
 
   function forceExternalLinks() {

roles/web-svc-logout/config/main.yml

@@ -3,6 +3,7 @@ features:
   css:              true
   port-ui-desktop:  true
   javascript:       false
+  logout:           false
 domains:
   canonical:
     - "logout.{{ primary_domain }}"

roles/web-svc-logout/vars/main.yml

@@ -8,8 +8,5 @@ container_port:               8000
 # @todo implement the calling of also dependency domains (propably the easiest to write a script which adds all dependencies to group_names)
 logout_domains: >-
   {{
-    (
-      [primary_domain] +
-      (applications | logout_domains(group_names))
-    ) | unique | join(',')
+    (applications | logout_domains(group_names)) | unique | join(',')
   }}