diff options
| author | Literallie | 2017-10-18 17:10:23 +0200 |
|---|---|---|
| committer | Literallie | 2017-10-22 00:03:44 +0200 |
| commit | ba183ce6543f102ae635502a0da0ac7c923cc97a (patch) | |
| tree | 494790b1e27b8468c511d8fc4e39ae04413e317f /lib/config | |
| parent | a23048254ddfb36a2c204c96db042fd0a6012b48 (diff) | |
Add basic CSP support
Diffstat (limited to '')
| -rw-r--r-- | lib/config/default.js | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/lib/config/default.js b/lib/config/default.js index f4c45e3d..e207dfc6 100644 --- a/lib/config/default.js +++ b/lib/config/default.js @@ -13,6 +13,16 @@ module.exports = { includeSubdomains: true, preload: true }, + csp: { + enable: true, + reportUri: '', + directives: { + defaultSrc: ["'self'"], + scriptSrc: ["'self'"], + styleSrc: ["'self'", "'unsafe-inline'"], + fontSrc: ["'self'"] + } + }, protocolusessl: false, usecdn: true, allowanonymous: true, |