feat: add SVG Tools to Toolbox 0.10.0

This commit is contained in:
2026-08-02 16:36:22 +02:00
parent 55b2b12434
commit 5ed7134d42
20 changed files with 160 additions and 46 deletions
+12 -1
View File
@@ -4,6 +4,16 @@ map $uri $toolbox_cache_control {
"~^/apps/[a-z0-9][a-z0-9-]*/vendor/ffmpeg/(?:(?:0|[1-9][0-9]*)\.(?:0|[1-9][0-9]*)\.(?:0|[1-9][0-9]*)|0\.12\.10-reviewed-stack5m\.1)/(?:version\.json|(?:st|mt)/ffmpeg-core\.(?:js|wasm)|mt/ffmpeg-core\.worker\.js)$" "public, max-age=31536000, immutable";
}
map $uri $toolbox_resource_policy {
default "same-origin";
"/apps/svg/canvas-frame-controller.js" "cross-origin";
}
map $uri $toolbox_access_control_allow_origin {
default "";
"/apps/svg/canvas-frame-controller.js" "*";
}
server {
listen 8080;
listen [::]:8080;
@@ -19,7 +29,8 @@ server {
add_header X-Frame-Options "DENY" always;
add_header Cross-Origin-Opener-Policy "same-origin" always;
add_header Cross-Origin-Embedder-Policy "require-corp" always;
add_header Cross-Origin-Resource-Policy "same-origin" always;
add_header Cross-Origin-Resource-Policy $toolbox_resource_policy always;
add_header Access-Control-Allow-Origin $toolbox_access_control_allow_origin always;
add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), payment=(), usb=()" always;
add_header Content-Security-Policy "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; media-src 'self' blob:; font-src 'self' data:; connect-src 'self'; worker-src 'self' blob:; manifest-src 'self'" always;
add_header Cache-Control $toolbox_cache_control always;