Procházet zdrojové kódy

Riot web doesn't like content security

Bob Mottram před 8 roky
rodič
revize
38e085fc18
1 změnil soubory, kde provedl 4 přidání a 0 odebrání
  1. 4
    0
      src/freedombone-app-riot

+ 4
- 0
src/freedombone-app-riot Zobrazit soubor

@@ -227,6 +227,7 @@ function install_riot {
227 227
     sed -i "s|\"integrations_ui_url\":.*|\"integrations_ui_url\": \"https://${MATRIX_DOMAIN_NAME}/\",|g" config.json
228 228
     sed -i "s|\"integrations_rest_url\":.*|\"integrations_rest_url\": \"https://${MATRIX_DOMAIN_NAME}/api\",|g" config.json
229 229
     sed -i "s|\"bug_report_endpoint_url\":.*|\"bug_report_endpoint_url\": \"https://${MATRIX_DOMAIN_NAME}/bugs\",|g" config.json
230
+    sed -i "/\"servers\":/a \"matrix.freedombone.net\"," config.json
230 231
 
231 232
     RIOT_ONION_HOSTNAME=$(add_onion_service riot 80 ${RIOT_ONION_PORT})
232 233
 
@@ -292,6 +293,9 @@ function install_riot {
292 293
     nginx_keybase ${RIOT_DOMAIN_NAME}
293 294
     echo '}' >> $riot_nginx_site
294 295
 
296
+    sed '/Content-Security-Policy/d' $riot_nginx_site
297
+    sed -i 's| DENY;| SAMEORIGIN;|g' $riot_nginx_site
298
+
295 299
     function_check create_site_certificate
296 300
     if [ ! -f /etc/ssl/certs/${RIOT_DOMAIN_NAME}.pem ]; then
297 301
         create_site_certificate $RIOT_DOMAIN_NAME 'yes'