regalijan/car-crushers-portal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove CSP

Browse Source
This commit is contained in:
regalijan
2023-10-19 16:49:35 -04:00
parent ee68c1b13d
commit c97029e510
4 changed files with 7 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
functions/_middleware.ts
View File

@ -78,8 +78,6 @@ async function setBody(context: RequestContext) {
}
async function setHeaders(context: RequestContext) {
const nonce = crypto.randomUUID().replace(/-/g, "");
context.data.nonce = nonce;
const response = await context.next();
const rtvValues = [
@ -101,27 +99,6 @@ async function setHeaders(context: RequestContext) {
);
response.headers.set("X-XSS-Protection", "1; mode=block");
const policies = {
"connect-src": ["https://*.ingest.sentry.io", "'self'"],
"default-src": ["'self'"],
"frame-src": ["https://challenges.cloudflare.com"],
"img-src": [
"https://cdn.discordapp.com/avatars/*",
"https://tr.rbxcdn.com",
"'self'",
],
"media-src": ["https://mediaproxy.carcrushers.cc"],
"script-src": ["https://challenges.cloudflare.com", "'self'"],
"style-src": [`nonce-${nonce}`, "'self'"],
};
const directives = [];
for (const [k, v] of Object.entries(policies))
directives.push(`${k} ${v.join(" ")}`);
response.headers.set("Content-Security-Policy", directives.join("; "));
return response;
}