spacecruft
/
satnogs-db
1
0
Fork 0
Code Releases Activity

Add support for configuring CSP through environment variables 

Signed-off-by: Vasilis Tsiligiannis <acinonyx@openwrt.gr>
spacecruft
Vasilis Tsiligiannis 2020-04-21 22:14:50 +03:00
parent 2e59bc3acc
commit 79efc9a1c3
1 changed files with 23 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
db/settings.py
View File

@ -269,24 +269,32 @@ REST_FRAMEWORK = {
# Security
SECRET_KEY = config('SECRET_KEY', default='changeme')
SECURE_HSTS_SECONDS = config('SECURE_HSTS_SECONDS', default=31536000, cast=int)
CSP_DEFAULT_SRC = (
"'self'",
'https://*.mapbox.com',
CSP_DEFAULT_SRC = config(
'CSP_DEFAULT_SRC',
cast=lambda v: tuple(s.strip() for s in v.split(',')),
default="'self',"
'https://*.mapbox.com'
)
CSP_SCRIPT_SRC = (
"'self'",
'https://*.google-analytics.com',
"'unsafe-eval'",
CSP_SCRIPT_SRC = config(
'CSP_SCRIPT_SRC',
cast=lambda v: tuple(s.strip() for s in v.split(',')),
default="'self',"
'https://*.google-analytics.com,'
"'unsafe-eval'"
)
CSP_IMG_SRC = (
"'self'",
'https://*.gravatar.com',
'https://*.mapbox.com',
'https://*.google-analytics.com',
'data:',
'blob:',
CSP_IMG_SRC = config(
'CSP_IMG_SRC',
cast=lambda v: tuple(s.strip() for s in v.split(',')),
default="'self',"
'https://*.gravatar.com,'
'https://*.mapbox.com,'
'https://*.google-analytics.com,'
'data:,'
'blob:'
)
CSP_CHILD_SRC = config(
'CSP_CHILD_SRC', cast=lambda v: tuple(s.strip() for s in v.split(',')), default='blob:'
)
CSP_CHILD_SRC = ('blob:', )
SECURE_HSTS_INCLUDE_SUBDOMAINS = True
SECURE_CONTENT_TYPE_NOSNIFF = True
SECURE_BROWSER_XSS_FILTER = True