Add basic CSP support

2017-10-18 17:10:23 +02:00
parent a23048254d
commit ba183ce654
2 changed files with 35 additions and 0 deletions
--- a/lib/config/default.js
+++ b/lib/config/default.js
@@ -13,6 +13,16 @@ module.exports = {
    includeSubdomains: true,
    preload: true
  },
+  csp: {
+    enable: true,
+    reportUri: '',
+    directives: {
+      defaultSrc: ["'self'"],
+      scriptSrc: ["'self'"],
+      styleSrc: ["'self'", "'unsafe-inline'"],
+      fontSrc: ["'self'"]
+    }
+  },
  protocolusessl: false,
  usecdn: true,
  allowanonymous: true,