diff options
| author | Christoph (Sheogorath) Kern | 2018-01-22 20:43:46 +0100 |
|---|---|---|
| committer | GitHub | 2018-01-22 20:43:46 +0100 |
| commit | 7de6e3211f797ed9e9e5ca3d52181f77abf030d0 (patch) | |
| tree | 8dc88e060df51106eedda199fe7ea571d0ffd5b4 /lib/config | |
| parent | fbfe3272f58232e6a7e46a82232b4dab065e2390 (diff) | |
| parent | 3a752fde5117e800d65e26cbe7b15d65eb5b491e (diff) | |
Merge pull request #598 from xxyy/feature/csp
Implement basic CSP support
Diffstat (limited to '')
| -rw-r--r-- | lib/config/default.js | 7 | ||||
| -rw-r--r-- | lib/config/environment.js | 3 |
2 files changed, 10 insertions, 0 deletions
diff --git a/lib/config/default.js b/lib/config/default.js index 000c154a..ec7c7451 100644 --- a/lib/config/default.js +++ b/lib/config/default.js @@ -13,6 +13,13 @@ module.exports = { includeSubdomains: true, preload: true }, + csp: { + enable: true, + directives: { + }, + addDefaults: true, + upgradeInsecureRequests: 'auto' + }, protocolusessl: false, usecdn: true, allowanonymous: true, diff --git a/lib/config/environment.js b/lib/config/environment.js index eedd4913..24a85d65 100644 --- a/lib/config/environment.js +++ b/lib/config/environment.js @@ -14,6 +14,9 @@ module.exports = { includeSubdomains: toBooleanConfig(process.env.HMD_HSTS_INCLUDE_SUBDOMAINS), preload: toBooleanConfig(process.env.HMD_HSTS_PRELOAD) }, + csp: { + enable: toBooleanConfig(process.env.HMD_CSP_ENABLE) + }, protocolusessl: toBooleanConfig(process.env.HMD_PROTOCOL_USESSL), alloworigin: toArrayConfig(process.env.HMD_ALLOW_ORIGIN), usecdn: toBooleanConfig(process.env.HMD_USECDN), |