Remove gist.github.com, gitlab.com from default CSP (#7008)
This commit is contained in:
@@ -18,6 +18,7 @@ import { getTeamFromContext } from "@server/utils/passport";
|
||||
import { robotsResponse } from "@server/utils/robots";
|
||||
import apexRedirect from "../middlewares/apexRedirect";
|
||||
import { renderApp, renderShare } from "./app";
|
||||
import { renderEmbed } from "./embeds";
|
||||
import errors from "./errors";
|
||||
|
||||
const koa = new Koa();
|
||||
@@ -128,6 +129,9 @@ router.get("/s/:shareId", shareDomains(), renderShare);
|
||||
router.get("/s/:shareId/doc/:documentSlug", shareDomains(), renderShare);
|
||||
router.get("/s/:shareId/*", shareDomains(), renderShare);
|
||||
|
||||
router.get("/embeds/gitlab", renderEmbed);
|
||||
router.get("/embeds/github", renderEmbed);
|
||||
|
||||
// catch all for application
|
||||
router.get("*", shareDomains(), async (ctx, next) => {
|
||||
if (ctx.state?.rootShare) {
|
||||
|
||||
Reference in New Issue
Block a user