euzu/tuliprox
1
0
Fork 0
mirror of https://github.com/euzu/tuliprox.git synced 2026-10-26 08:42:16 +01:00
Code Issues Packages Projects Releases 5 Wiki Activity

feat: make content security policy configurable

Browse Source
This commit is contained in:
knylbyte
2025-08-18 13:46:23 +02:00
parent 0168953351
commit e2c6aff5dc
8 changed files with 142 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/api/endpoints/web_index.rs
+16 -4
View File
@@ -164,10 +164,22 @@ async fn index(
let mut builder = axum::response::Response::builder()
.header("Content-Type", mime::TEXT_HTML_UTF_8.as_ref());
if config.web_ui.as_ref().is_some_and(|w| w.content_security_policy) {
builder = builder.header("Content-Security-Policy",
format!("default-src 'self'; script-src 'self' 'unsafe-eval' 'nonce-{nonce_b64}'; style-src 'self' 'nonce-{nonce_b64}'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'"));
if let Some(csp) = config
.web_ui
.as_ref()
.and_then(|w| w.content_security_policies.as_ref())
.filter(|c| c.enabled)
{
let mut attrs = vec![
"default-src 'self'".to_string(),
format!("script-src 'self' nonce-{nonce_b64}"),
"frame-ancestors 'none'".to_string(),
];
attrs.extend(csp.custom_attributes.iter().cloned());
for attr in attrs.iter_mut() {
*attr = attr.replace("{nonce_b64}", &nonce_b64);
}
builder = builder.header("Content-Security-Policy", attrs.join("; "));
}
return try_unwrap_body!(builder.body(new_content));
}