Mirroristas/mCaptcha
2
0
Fork 0
mirror of https://github.com/mCaptcha/mCaptcha.git synced 2025-11-24 14:35:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

strict transport policy heaer

Browse Source
This commit is contained in:
realaravinth 2021-08-05 21:05:27 +05:30
parent 6763867cbe
commit 65ffc37549
No known key found for this signature in database
GPG Key ID: AD9F0F08E855ED88
5 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
config/default.toml
View File

@ -14,6 +14,10 @@ ip= "0.0.0.0"
# enter your hostname, eg: example.com # enter your hostname, eg: example.com
domain = "localhost" domain = "localhost"
allow_registration = true allow_registration = true
# Set true if you have setup TLS with a reverse proxy like Nginx.
# Does HTTPS redirect and sends additional headers that can only be used if
# HTTPS available to improve security
proxy_has_tls = false
#url_prefix = "" #url_prefix = ""
[pow] [pow]

1
src/settings.rs
View File

@ -30,6 +30,7 @@ pub struct Server {
pub cookie_secret: String, pub cookie_secret: String,
pub ip: String, pub ip: String,
pub url_prefix: Option<String>, pub url_prefix: Option<String>,
pub proxy_has_tls: bool,
} }
#[derive(Debug, Clone, Deserialize)] #[derive(Debug, Clone, Deserialize)]

2
templates/components/headers/csp.html
View File

@ -1,6 +1,4 @@
<!--
<meta <meta
http-equiv="Content-Security-Policy" http-equiv="Content-Security-Policy"
content="default-src 'self' *.mcaptcha.org mcaptcha.org mcaptcha.io *.mcaptcha.io; img-src 'self'; style-src 'self'; child-src 'none'; script-src 'self';" content="default-src 'self' *.mcaptcha.org mcaptcha.org mcaptcha.io *.mcaptcha.io; img-src 'self'; style-src 'self'; child-src 'none'; script-src 'self';"
/> />
-->

3
templates/components/headers/https.html Normal file
View File

@ -0,0 +1,3 @@
<meta
http-equiv="Strict-Transport-Security" content="max-age=63072000"
/>

3
templates/components/headers/index.html
View File

@ -4,5 +4,8 @@
<. include!("./preview-data.html"); .> <. include!("./preview-data.html"); .>
<. include!("./favicon.html"); .> <. include!("./favicon.html"); .>
<. include!("./csp.html"); .> <. include!("./csp.html"); .>
<. if crate::SETTINGS.server.proxy_has_tls { .>
<. include!("./https.html"); .>
<. } .>
</head> </head>
<body class="layout"> <body class="layout">