parent
304c246cb2
commit
efa9b4ea70
|
@ -136,10 +136,19 @@ func renderTemplate2(tmplName, hookName string, w http.ResponseWriter, r *http.R
|
||||||
func FootHeaders(w http.ResponseWriter, h *c.Header) {
|
func FootHeaders(w http.ResponseWriter, h *c.Header) {
|
||||||
// TODO: Only set video domain when there is a video on the page
|
// TODO: Only set video domain when there is a video on the page
|
||||||
if !h.LooseCSP {
|
if !h.LooseCSP {
|
||||||
|
he := w.Header()
|
||||||
if c.Config.SslSchema {
|
if c.Config.SslSchema {
|
||||||
w.Header().Set("Content-Security-Policy", "default-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-eval' 'unsafe-inline'; img-src * data: 'unsafe-eval' 'unsafe-inline'; connect-src * 'unsafe-eval' 'unsafe-inline'; frame-src 'self' www.youtube-nocookie.com embed.nicovideo.jp;upgrade-insecure-requests")
|
if h.ExternalMedia {
|
||||||
|
he.Set("Content-Security-Policy", "default-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-eval' 'unsafe-inline'; img-src * data: 'unsafe-eval' 'unsafe-inline'; connect-src * 'unsafe-eval' 'unsafe-inline'; frame-src 'self' www.youtube-nocookie.com embed.nicovideo.jp;upgrade-insecure-requests")
|
||||||
|
} else {
|
||||||
|
he.Set("Content-Security-Policy", "default-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-eval' 'unsafe-inline'; img-src * data: 'unsafe-eval' 'unsafe-inline'; connect-src * 'unsafe-eval' 'unsafe-inline'; frame-src 'self';upgrade-insecure-requests")
|
||||||
|
}
|
||||||
} else {
|
} else {
|
||||||
w.Header().Set("Content-Security-Policy", "default-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-eval' 'unsafe-inline'; img-src * data: 'unsafe-eval' 'unsafe-inline'; connect-src * 'unsafe-eval' 'unsafe-inline'; frame-src 'self' www.youtube-nocookie.com embed.nicovideo.jp")
|
if h.ExternalMedia {
|
||||||
|
he.Set("Content-Security-Policy", "default-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-eval' 'unsafe-inline'; img-src * data: 'unsafe-eval' 'unsafe-inline'; connect-src * 'unsafe-eval' 'unsafe-inline'; frame-src 'self' www.youtube-nocookie.com embed.nicovideo.jp")
|
||||||
|
} else {
|
||||||
|
he.Set("Content-Security-Policy", "default-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-eval' 'unsafe-inline'; img-src * data: 'unsafe-eval' 'unsafe-inline'; connect-src * 'unsafe-eval' 'unsafe-inline'; frame-src 'self'")
|
||||||
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
|
@ -1271,7 +1271,7 @@ red {
|
||||||
background-color: #EFEEEE;
|
background-color: #EFEEEE;
|
||||||
border-radius: 3px;
|
border-radius: 3px;
|
||||||
padding: 16px;
|
padding: 16px;
|
||||||
white-space: nowrap;
|
overflow-wrap: break-word;
|
||||||
}
|
}
|
||||||
|
|
||||||
#ip_search_container .rowlist:not(.has_items) {
|
#ip_search_container .rowlist:not(.has_items) {
|
||||||
|
@ -1694,6 +1694,10 @@ red {
|
||||||
.hide_on_big {
|
.hide_on_big {
|
||||||
display: none;
|
display: none;
|
||||||
}
|
}
|
||||||
|
.postIframe {
|
||||||
|
min-width: 400px;
|
||||||
|
min-height: 200px;
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
@media(max-width: 720px) {
|
@media(max-width: 720px) {
|
||||||
|
|
Loading…
Reference in New Issue