mirror of
https://github.com/LukeHagar/website.git
synced 2025-12-09 21:07:46 +00:00
update: use better logic.
This commit is contained in:
@@ -38,8 +38,9 @@ const securityheaders: Handle = async ({ event, resolve }) => {
|
|||||||
}
|
}
|
||||||
});
|
});
|
||||||
|
|
||||||
const hostname = event.url.hostname;
|
// `true` if deployed via Coolify.
|
||||||
const isPreview = hostname.endsWith('.sslip.io');
|
const isPreview = !!process.env.COOLIFY_FQDN;
|
||||||
|
const previewDomain = process.env.COOLIFY_FQDN ? `http://${process.env.COOLIFY_FQDN}` : null;
|
||||||
|
|
||||||
const cspDirectives: Record<string, string> = {
|
const cspDirectives: Record<string, string> = {
|
||||||
'default-src': "'self'",
|
'default-src': "'self'",
|
||||||
@@ -61,10 +62,9 @@ const securityheaders: Handle = async ({ event, resolve }) => {
|
|||||||
};
|
};
|
||||||
|
|
||||||
if (isPreview) {
|
if (isPreview) {
|
||||||
const allowPreview = ' http://*.sslip.io';
|
|
||||||
['default-src', 'script-src', 'style-src', 'img-src', 'font-src', 'connect-src'].forEach(
|
['default-src', 'script-src', 'style-src', 'img-src', 'font-src', 'connect-src'].forEach(
|
||||||
(key) => {
|
(key) => {
|
||||||
cspDirectives[key] += allowPreview;
|
cspDirectives[key] += ` ${previewDomain}`;
|
||||||
}
|
}
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user