mirror of
https://github.com/philomena-dev/philomena.git
synced 2024-12-03 16:17:59 +01:00
27 lines
822 B
Elixir
27 lines
822 B
Elixir
defmodule PhilomenaWeb.ContentSecurityPolicyPlug do
|
|
alias Plug.Conn
|
|
|
|
def init(opts) do
|
|
opts
|
|
end
|
|
|
|
def call(conn, _opts) do
|
|
cdn_uri = cdn_uri()
|
|
camo_uri = camo_uri()
|
|
|
|
csp_value =
|
|
"default-src 'self' #{cdn_uri}; object-src 'none'; " <>
|
|
"frame-ancestors 'none'; frame-src 'none'; form-action 'self'; " <>
|
|
"manifest-src 'self'; img-src 'self' data: #{cdn_uri} #{camo_uri}; " <>
|
|
"block-all-mixed-content"
|
|
|
|
#Conn.put_resp_header(conn, "content-security-policy", csp_value)
|
|
conn
|
|
end
|
|
|
|
defp cdn_uri, do: Application.get_env(:philomena, :cdn_host) |> to_uri()
|
|
defp camo_uri, do: Application.get_env(:philomena, :camo_host) |> to_uri()
|
|
|
|
defp to_uri(host) when host in [nil, ""], do: ""
|
|
defp to_uri(host), do: URI.to_string(%URI{scheme: "https", host: host})
|
|
end
|