Add utils.js to Docker build and update CSP with hash
	
		
			
	
		
	
	
		
			
				
	
				ci/woodpecker/push/woodpecker Pipeline was successful
				
					Details
				
			
		
	
				
					
				
			
				
	
				ci/woodpecker/push/woodpecker Pipeline was successful
				
					Details
				
			
		
	This commit is contained in:
		
							parent
							
								
									630ef90df1
								
							
						
					
					
						commit
						0f81e0318e
					
				| 
						 | 
					@ -25,8 +25,8 @@
 | 
				
			||||||
        Cross-Origin-Resource-Policy "same-origin"
 | 
					        Cross-Origin-Resource-Policy "same-origin"
 | 
				
			||||||
        Cross-Origin-Opener-Policy "same-origin"
 | 
					        Cross-Origin-Opener-Policy "same-origin"
 | 
				
			||||||
        
 | 
					        
 | 
				
			||||||
        # Simplified CSP for static content
 | 
					        # CSP with hash for utils.js and nonce for inline scripts
 | 
				
			||||||
        Content-Security-Policy "default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self' data:; connect-src 'self'; object-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none';"
 | 
					        Content-Security-Policy "default-src 'none'; script-src 'self' 'sha256-ryQsJ+aghKKD/CeXgx8jtsnZT3Epp3EjIw8RyHIq544='; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; connect-src 'self'; object-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none';"
 | 
				
			||||||
    }
 | 
					    }
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    # Handle 404s
 | 
					    # Handle 404s
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -4,6 +4,7 @@ FROM caddy:2-alpine
 | 
				
			||||||
COPY Caddyfile /etc/caddy/Caddyfile
 | 
					COPY Caddyfile /etc/caddy/Caddyfile
 | 
				
			||||||
COPY index.html /srv/
 | 
					COPY index.html /srv/
 | 
				
			||||||
COPY theme.js /srv/
 | 
					COPY theme.js /srv/
 | 
				
			||||||
 | 
					COPY utils.js /srv/
 | 
				
			||||||
COPY styles.css /srv/
 | 
					COPY styles.css /srv/
 | 
				
			||||||
 | 
					
 | 
				
			||||||
# Expose port 8080
 | 
					# Expose port 8080
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
		Reference in New Issue