mirror of
https://github.com/iv-org/invidious.git
synced 2024-09-01 15:12:07 +00:00
Add CSP, STS, and Referrer-Policy
This commit is contained in:
parent
c8cf4fe09c
commit
a1b3b47573
@ -169,6 +169,12 @@ proxies = PROXY_LIST
|
|||||||
before_all do |env|
|
before_all do |env|
|
||||||
env.response.headers["X-XSS-Protection"] = "1; mode=block;"
|
env.response.headers["X-XSS-Protection"] = "1; mode=block;"
|
||||||
env.response.headers["X-Content-Type-Options"] = "nosniff"
|
env.response.headers["X-Content-Type-Options"] = "nosniff"
|
||||||
|
env.response.headers["Content-Security-Policy"] = "default-src data: 'self' 'unsafe-inline' 'unsafe-eval'; media-src 'self' https://*.googlevideo.com:443"
|
||||||
|
env.response.headers["Referrer-Policy"] = "same-origin"
|
||||||
|
|
||||||
|
if Kemal.config.ssl || config.https_only
|
||||||
|
env.response.headers["Strict-Transport-Security"] = "max-age=604800; includeSubDomains"
|
||||||
|
end
|
||||||
|
|
||||||
begin
|
begin
|
||||||
preferences = Preferences.from_json(env.request.cookies["PREFS"]?.try &.value || "{}")
|
preferences = Preferences.from_json(env.request.cookies["PREFS"]?.try &.value || "{}")
|
||||||
@ -4578,13 +4584,15 @@ end
|
|||||||
# Add redirect if SSL is enabled
|
# Add redirect if SSL is enabled
|
||||||
if Kemal.config.ssl
|
if Kemal.config.ssl
|
||||||
spawn do
|
spawn do
|
||||||
server = HTTP::Server.new do |context|
|
server = HTTP::Server.new do |env|
|
||||||
redirect_url = "https://#{context.request.host}#{context.request.path}"
|
redirect_url = "https://#{env.request.host}#{env.request.path}"
|
||||||
if context.request.query
|
if env.request.query
|
||||||
redirect_url += "?#{context.request.query}"
|
redirect_url += "?#{env.request.query}"
|
||||||
end
|
end
|
||||||
context.response.headers.add("Location", redirect_url)
|
|
||||||
context.response.status_code = 301
|
env.response.headers["Strict-Transport-Security"] = "max-age=604800; includeSubDomains"
|
||||||
|
env.response.headers["Location"] = redirect_url
|
||||||
|
env.response.status_code = 301
|
||||||
end
|
end
|
||||||
|
|
||||||
server.bind_tcp "0.0.0.0", 80
|
server.bind_tcp "0.0.0.0", 80
|
||||||
|
Loading…
Reference in New Issue
Block a user