mirror of
https://github.com/YunoHost/yunohost.git
synced 2024-09-03 20:06:10 +02:00
17 lines
751 B
C++
17 lines
751 B
C++
# Avoid the nginx path/alias traversal weakness ( #1037 )
|
|
rewrite ^/yunohost/admin$ /yunohost/admin/ permanent;
|
|
|
|
location /yunohost/admin/ {
|
|
alias /usr/share/yunohost/admin/;
|
|
default_type text/html;
|
|
index index.html;
|
|
|
|
more_set_headers "Content-Security-Policy: upgrade-insecure-requests; default-src 'self'; connect-src 'self' https://raw.githubusercontent.com https://paste.yunohost.org wss://$host; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval'; object-src 'none';";
|
|
more_set_headers "Content-Security-Policy-Report-Only:";
|
|
|
|
# Short cache on handlebars templates
|
|
location ~* \.(js|css|png|jpg|jpeg|gif|ico|json|woff|woff2|ttf|eot)$ {
|
|
expires 5m;
|
|
add_header Cache-Control "public";
|
|
}
|
|
}
|