mirror of
https://github.com/YunoHost-Apps/shellinabox_ynh.git
synced 2024-09-03 20:26:12 +02:00
583328ef11
The blank page, instead of a login prompt, is linked to this error: `Content Security Policy: The page’s settings blocked the loading of a resource at self (“script-src https: 'unsafe-eval'”)`
Maybe it's something about [this line](d4bd77ca45/shellinabox/shell_in_a_box.jspp (L200))
The only way I found to fix that is to allow to use eval.
19 lines
539 B
Nginx Configuration File
19 lines
539 B
Nginx Configuration File
location __PATH__ {
|
|
|
|
if ($scheme = http) {
|
|
rewrite ^ https://$server_name$request_uri? permanent;
|
|
}
|
|
|
|
proxy_pass http://127.0.0.1:__PORT__/;
|
|
proxy_set_header Host $host;
|
|
proxy_buffering off;
|
|
tcp_nodelay on;
|
|
access_log off;
|
|
|
|
# Allow shellinabox to use 'eval' without blocking the execution. But keep a warning.
|
|
add_header Content-Security-Policy-Report-Only "script-src https: 'unsafe-eval'";
|
|
|
|
# Include SSOWAT user panel.
|
|
include conf.d/yunohost_panel.conf.inc;
|
|
more_clear_input_headers 'Accept-Encoding';
|
|
}
|