Nice.

Browse Source
This commit is contained in:
retoor 2025-06-14 12:53:40 +02:00
parent bf576bc0e3
commit 6a905c1948
1 changed files with 6 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
src/snek/system/middleware.py
View File

@ -7,21 +7,20 @@ from aiohttp import web
@web.middleware @web.middleware
async def csp_middleware(request, handler): async def csp_middleware(request, handler):
nonce = str(secrets.token_hex(16)) nonce = secrets.token_hex(16)
print("Nonce:", nonce)
csp_policy = ( csp_policy = (
"default-src 'self'; " "default-src 'self'; "
f"script-src 'self' https://umami.molodetz.nl 'nonce-{nonce}'; " f"script-src 'self' https://umami.molodetz.nl 'nonce-{nonce}'; "
"style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; " "style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; "
"img-src 'self' data: https://umodetz.nl; " "img-src *; "
"connect-src 'self' https://umodetz.nl; " "connect-src 'self' https://umami.molodetz.nl; "
"font-src 'self' data:; " "font-src *; "
"object-src 'none'; " "object-src 'none'; "
"base-uri 'self'; " "base-uri 'self'; "
"form-action 'self'; " "form-action 'self'; "
"frame-src 'self'; " "frame-src 'self'; "
"worker-src 'self'; " "worker-src *; "
"media-src 'self'; " "media-src *; "
"manifest-src 'self';" "manifest-src 'self';"
) )
request['csp_nonce'] = nonce request['csp_nonce'] = nonce