yume/yumechi-no-kuni
1
0
Fork 0
Code Issues Pull requests1 Projects Releases Packages Wiki Activity Actions

csp: allow WASM

Browse source 
Signed-off-by: eternal-flame-AD <yume@yumechi.jp>
This commit is contained in:
ゆめ 2024-11-11 05:16:32 -06:00
parent 20fc81c7b7
commit b72a84a389
No known key found for this signature in database
1 changed files with 9 additions and 9 deletions

18
packages/backend/src/server/csp.ts
View file

@ -12,7 +12,7 @@ export type CSPHashed = {
};
export function generateCSP(hashedMap: Map<string, CSPHashed>, options: {
mediaProxy ?: string,
mediaProxy?: string,
}) {
const keys = Array.from(hashedMap.keys());
const scripts = keys
@ -28,7 +28,7 @@ export function generateCSP(hashedMap: Map<string, CSPHashed>, options: {
['media-src', ['\'self\'', 'data:', options.mediaProxy].filter(Boolean)],
['font-src', ['\'self\'']],
['style-src', ['\'self\'', ...styles]],
['script-src', ['\'self\'', ...scripts]],
['script-src', ['\'self\'', '\'unsafe-wasm-eval\'', ...scripts]],
['object-src', ['\'none\'']],
['frame-src', ['\'none\'']],
['base-uri', ['\'self\'']],
@ -36,14 +36,14 @@ export function generateCSP(hashedMap: Map<string, CSPHashed>, options: {
['child-src', ['\'self\'']],
['form-action', ['\'self\'']],
['manifest-src', ['\'self\'']],
...(process.env.NODE_ENV === 'production' ?
[
['upgrade-insecure-requests', []],
] : []),
...(process.env.NODE_ENV === 'production' ?
[
['upgrade-insecure-requests', []],
] : []),
] as [string, string[]][])
.map(([name, values]) => {
return `${name} ${values.join(' ')}`;
}).join('; ');
.map(([name, values]) => {
return `${name} ${values.join(' ')}`;
}).join('; ');
}
export function hashResource(res: string): CSPHashed {