Merge pull request #598 from xxyy/feature/csp

Implement basic CSP support
2018-01-22 20:43:46 +01:00
parent fbfe3272f5 3a752fde51
commit 7de6e3211f
12 changed files with 132 additions and 15 deletions
--- a/config.json.example
+++ b/config.json.example
@@ -17,10 +17,17 @@
    "production": {
        "domain": "localhost",
        "hsts": {
-            "enable": "true",
+            "enable": true,
            "maxAgeSeconds": "31536000",
-            "includeSubdomains": "true",
-            "preload": "true"
+            "includeSubdomains": true,
+            "preload": true
+        },
+        csp: {
+            "enable": true,
+            "directives": {
+            },
+            "upgradeInsecureRequests": "auto"
+            "addDefaults": true
        },
        "db": {
            "username": "",