prehistoric-systems/FilterLists
1
0
Fork 0
mirror of https://github.com/collinbarrett/FilterLists.git synced 2026-03-11 09:04:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(reverse-proxy): ✨🔒 give apis only connect-src csp

Browse source
This commit is contained in:
Collin M. Barrett 2021-01-23 18:12:22 -06:00
parent 8364f47d22
commit 56f96bd3bd
2 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
reverse-proxy/conf.d.dev/default.conf
View file

@ -6,14 +6,14 @@ server {
rewrite ^/api/archival/(.*)$ /$1 break;
proxy_pass http://archival-api:80;
include location-includes/*;
add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';" always;
add_header Content-Security-Policy "default-src 'none'; connect-src 'self';" always;
}
location ^~ /api/directory/ {
rewrite ^/api/directory/(.*)$ /$1 break;
proxy_pass http://directory-api:80;
include location-includes/*;
add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';" always;
add_header Content-Security-Policy "default-src 'none'; connect-src 'self';" always;
}
location ^~ /api/ {

4
reverse-proxy/conf.d/default.conf
View file

@ -9,14 +9,14 @@ server {
rewrite ^/api/archival/(.*)$ /$1 break;
proxy_pass http://archival-api:80;
include location-includes/*;
add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';" always;
add_header Content-Security-Policy "default-src 'none'; connect-src 'self';" always;
}
location ^~ /api/directory/ {
rewrite ^/api/directory/(.*)$ /$1 break;
proxy_pass http://directory-api:80;
include location-includes/*;
add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';" always;
add_header Content-Security-Policy "default-src 'none'; connect-src 'self';" always;
}
location ^~ /api/ {