From 4ecfad994617a1184a49f0934619ec82853fc8be Mon Sep 17 00:00:00 2001 From: "Collin M. Barrett" Date: Sat, 27 Jul 2019 10:45:33 -0500 Subject: [PATCH] add csp --- ops/nginx/conf.d.dev/filterlists.conf | 2 ++ ops/nginx/conf.d/filterlists.conf | 4 +++- src/FilterLists.Web/Dockerfile | 2 +- 3 files changed, 6 insertions(+), 2 deletions(-) diff --git a/ops/nginx/conf.d.dev/filterlists.conf b/ops/nginx/conf.d.dev/filterlists.conf index 147533120..413d73315 100644 --- a/ops/nginx/conf.d.dev/filterlists.conf +++ b/ops/nginx/conf.d.dev/filterlists.conf @@ -2,6 +2,8 @@ server { listen 80 default_server; include svr-includes/*; + + add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self' data:; style-src 'self';" always; location ^~ /api { rewrite ^/api/(.*)$ /$1 break; diff --git a/ops/nginx/conf.d/filterlists.conf b/ops/nginx/conf.d/filterlists.conf index 16ac965df..86b563b1d 100644 --- a/ops/nginx/conf.d/filterlists.conf +++ b/ops/nginx/conf.d/filterlists.conf @@ -3,10 +3,12 @@ server { server_name filterlists.com; include svr-includes/*; - + ssl_certificate /etc/nginx/cert/filterlists_cert.pem; ssl_certificate_key /etc/nginx/cert/filterlists_key.pem; + add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self' data:; style-src 'self';" always; + location ^~ /api { rewrite ^/api/(.*)$ /$1 break; proxy_pass http://api:80; diff --git a/src/FilterLists.Web/Dockerfile b/src/FilterLists.Web/Dockerfile index 44097fcca..a6dd8bcb4 100644 --- a/src/FilterLists.Web/Dockerfile +++ b/src/FilterLists.Web/Dockerfile @@ -14,7 +14,7 @@ RUN npm install --only=prod # build COPY src/FilterLists.Web/. ./ -RUN npm run build +RUN INLINE_RUNTIME_CHUNK=false npm run build # final FROM base as final