softinio/softinio.com
softinio/softinio.com
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

CORS and security updates #2

Merged
softinio merged 2 commits from cors-security-fix1 into main 2024-02-17 12:53:33 -08:00
Conversation 0 Commits 2 Files changed 4 +6 -1
2 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit f24eb27bef - Show all commits

2
config.toml
View file

@ -197,7 +197,7 @@ copyright = "© $CURRENT_YEAR $AUTHOR $SEPARATOR Unless otherwise noted, the con
allowed_domains = [ allowed_domains = [
{ directive = "font-src", domains = ["'self'", "data:"] }, { directive = "font-src", domains = ["'self'", "data:"] },
{ directive = "img-src", domains = ["'self'", "https://*", "data:"] }, { directive = "img-src", domains = ["'self'", "https://*", "data:"] },
{ directive = "script-src", domains = ["'self'", "https://comments.softinio.com/js/embed.min.js"] }, { directive = "script-src", domains = ["'self'", "https://comments.softinio.com/js/embed.min.js", "https://static.cloudflareinsights.com/beacon.min.js"] },
{ directive = "style-src", domains = ["'self'"] }, { directive = "style-src", domains = ["'self'"] },
{ directive = "frame-src", domains = ["player.vimeo.com", "https://www.youtube-nocookie.com", "https://watch.softinio.com", "https://notes.softinio.com/embed"] }, { directive = "frame-src", domains = ["player.vimeo.com", "https://www.youtube-nocookie.com", "https://watch.softinio.com", "https://notes.softinio.com/embed"] },
] ]

5
static/_headers Normal file
View file

@ -0,0 +1,5 @@
https://comments.softinio.com
Access-Control-Allow-Origin: https://comments.softinio.com
https://www.softinio.com
Access-Control-Allow-Origin: https://www.softinio.com