ts: lib/csp.js

Signed-off-by: Raccoon <raccoon@hackmd.io>
This commit is contained in:
Raccoon 2021-06-12 07:05:41 +08:00
parent 8ea1eb2650
commit 385ef6940b
No known key found for this signature in database
GPG Key ID: 06770355DC9ECD38

View File

@ -1,7 +1,7 @@
import * as config from "./config";
import * as uuid from "uuid";
var CspStrategy = {}
var CspStrategy: any = {}
var defaultDirectives = {
defaultSrc: ['\'self\''],
@ -86,8 +86,10 @@ function getCspNonce(req, res) {
function addUpgradeUnsafeRequestsOptionTo(directives) {
if (config.csp.upgradeInsecureRequests === 'auto' && config.useSSL) {
directives.upgradeInsecureRequests = true
} else if (config.csp.upgradeInsecureRequests === true) {
directives.upgradeInsecureRequests = true
} else { // @ts-ignore
if (config.csp.upgradeInsecureRequests === true) {
directives.upgradeInsecureRequests = true
}
}
}