lotobo/toolbox-portal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 32 Wiki Activity

feat: publish Toolbox 0.13.0 with Auth Tools 0.3.0

Browse Source
This commit is contained in:
zemion
2026-08-20 00:25:18 +02:00
parent 7ba733d9f2
commit 8d68557d5e
14 changed files with 72 additions and 46 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/nginx.conf
+6 -1
View File
@@ -14,6 +14,11 @@ map $uri $toolbox_access_control_allow_origin {
"/apps/svg/canvas-frame-controller.js" "*";
}
map $host $toolbox_permissions_policy {
default "camera=(), microphone=(), geolocation=(), payment=(), usb=()";
"auth.toolbox.add-ideas.de" "camera=(self), microphone=(), geolocation=(), payment=(), usb=()";
}
server {
listen 8080;
listen [::]:8080;
@@ -31,7 +36,7 @@ server {
add_header Cross-Origin-Embedder-Policy "require-corp" always;
add_header Cross-Origin-Resource-Policy $toolbox_resource_policy always;
add_header Access-Control-Allow-Origin $toolbox_access_control_allow_origin always;
add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), payment=(), usb=()" always;
add_header Permissions-Policy $toolbox_permissions_policy always;
add_header Content-Security-Policy "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; media-src 'self' blob:; font-src 'self' data:; connect-src 'self'; worker-src 'self' blob:; manifest-src 'self'" always;
add_header Cache-Control $toolbox_cache_control always;