beenull/mCaptcha
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

strict transport policy heaer

Browse source
This commit is contained in:
realaravinth 2021-08-05 21:05:27 +05:30
parent 6763867cbe
commit 65ffc37549
No known key found for this signature in database
GPG key ID: AD9F0F08E855ED88
5 changed files with 11 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
config/default.toml
View file

@ -14,6 +14,10 @@ ip= "0.0.0.0"
# enter your hostname, eg: example.com
domain = "localhost"
allow_registration = true
# Set true if you have setup TLS with a reverse proxy like Nginx.
# Does HTTPS redirect and sends additional headers that can only be used if
# HTTPS available to improve security
proxy_has_tls = false
#url_prefix = ""
[pow]

1
src/settings.rs
View file

@ -30,6 +30,7 @@ pub struct Server {
pub cookie_secret: String,
pub ip: String,
pub url_prefix: Option<String>,
pub proxy_has_tls: bool,
}
#[derive(Debug, Clone, Deserialize)]

2
templates/components/headers/csp.html
View file

@ -1,6 +1,4 @@
<!--
<meta
http-equiv="Content-Security-Policy"
content="default-src 'self' *.mcaptcha.org mcaptcha.org mcaptcha.io *.mcaptcha.io; img-src 'self'; style-src 'self'; child-src 'none'; script-src 'self';"
/>
-->

3
templates/components/headers/https.html Normal file
View file

@ -0,0 +1,3 @@
<meta
http-equiv="Strict-Transport-Security" content="max-age=63072000"
/>

3
templates/components/headers/index.html
View file

@ -4,5 +4,8 @@
<. include!("./preview-data.html"); .>
<. include!("./favicon.html"); .>
<. include!("./csp.html"); .>
<. if crate::SETTINGS.server.proxy_has_tls { .>
<. include!("./https.html"); .>
<. } .>
</head>
<body class="layout">