crowetic/qortal
1
0
Fork 0
forked from Qortal/qortal
Code Pull Requests Activity

add connect-src to csp

Browse Source
This commit is contained in:
PhilReact 2024-11-10 18:55:32 +02:00
parent 6648c4be22
commit 0850654519
2 changed files with 43107 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43106
qortal.log Normal file
View File

File diff suppressed because it is too large Load Diff

2
src/main/java/org/qortal/arbitrary/ArbitraryDataRenderer.java
View File

@ -168,7 +168,7 @@ public class ArbitraryDataRenderer {
byte[] data = Files.readAllBytes(filePath); // TODO: limit file size that can be read into memory
HTMLParser htmlParser = new HTMLParser(resourceId, inPath, prefix, includeResourceIdInPrefix, data, qdnContext, service, identifier, theme, usingCustomRouting);
htmlParser.addAdditionalHeaderTags();
response.addHeader("Content-Security-Policy", "default-src 'self' 'unsafe-inline' 'unsafe-eval'; media-src 'self' data: blob:; img-src 'self' data: blob:;");
response.addHeader("Content-Security-Policy", "default-src 'self' 'unsafe-inline' 'unsafe-eval'; media-src 'self' data: blob:; img-src 'self' data: blob:; connect-src 'self' wss:;");
response.setContentType(context.getMimeType(filename));
response.setContentLength(htmlParser.getData().length);
response.getOutputStream().write(htmlParser.getData());