m/umami
1
0
Fork 0
mirror of https://github.com/kremalicious/umami.git synced 2025-02-14 21:10:34 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fixed CSP issue, renamed var to ALLOWED_FRAME_URLS.

Browse Source
This commit is contained in:
Mike Cao 2023-06-29 19:38:35 -07:00
parent 040420c5ec
commit 6316a0b917
1 changed files with 2 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
next.config.js
View File

@ -2,18 +2,13 @@
require('dotenv').config(); require('dotenv').config();
const pkg = require('./package.json'); const pkg = require('./package.json');
const CLOUD_URL = 'https://cloud.umami.is';
// Space-separated list of URLs that can load the "Share" dashboard, i.e. http://app.localhost:7000 https://*.vercel.app
const EMBED_HOSTED_URL = process.env.EMBED_HOSTED_URL;
const contentSecurityPolicy = ` const contentSecurityPolicy = `
default-src 'self'; default-src 'self';
img-src *; img-src *;
script-src 'self' 'unsafe-eval'; script-src 'self' 'unsafe-eval';
style-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';
connect-src 'self' api.umami.is; connect-src 'self' api.umami.is;
frame-ancestors `self ${EMBED_HOSTED_URL}`; frame-ancestors 'self' ${process.env.ALLOWED_FRAME_URLS};
`; `;
const headers = [ const headers = [
@ -68,7 +63,7 @@ const redirects = [
}, },
]; ];
if (process.env.CLOUD_MODE && process.env.DISABLE_LOGIN && process.env.CLOUD_URL) { if (process.env.CLOUD_MODE && process.env.CLOUD_URL && process.env.DISABLE_LOGIN) {
redirects.push({ redirects.push({
source: '/login', source: '/login',
destination: process.env.CLOUD_URL, destination: process.env.CLOUD_URL,