infra
/
cryptpad
2
1
Fork 0
Code Issues Pull Requests Projects Releases 1 Activity

refine the header fixes for chrome to avoid breaking standalone instances

pull/1/head
ansuz 2021-04-15 18:03:13 +05:30
parent 8aaa44beeb
commit 3a0fe6968d
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
server.js
View File

@ -43,6 +43,7 @@ var canonicalizeOrigin = function (s) {
}
if (typeof(config.httpSafeOrigin) !== 'string') {
Env.NO_SANDBOX = true;
if (typeof(config.httpSafePort) !== 'number') {
config.httpSafePort = config.httpPort + 1;
}
@ -112,7 +113,14 @@ var setHeaders = (function () {
// Don't set CSP headers on /api/config because they aren't necessary and they cause problems
// when duplicated by NGINX in production environments
if (/^\/api\/(broadcast|config)/.test(req.url)) { return; }
if (/^\/api\/(broadcast|config)/.test(req.url)) {
if (!Env.NO_SANDBOX) {
applyHeaderMap(res, {
"Cross-Origin-Resource-Policy": 'cross-origin',
});
}
return;
}
applyHeaderMap(res, {
"Cross-Origin-Resource-Policy": 'cross-origin',
});