Publish Toolbox 0.18.1 with local-only Random Tools

This commit is contained in:
2026-09-01 08:32:15 +02:00
parent 08a01d843a
commit ea5f76554a
14 changed files with 47 additions and 54 deletions
+1 -6
View File
@@ -20,11 +20,6 @@ map "$host:$uri" $toolbox_permissions_policy {
"~^[^:]+:/apps/barcode(?:/|$)" "camera=(self), microphone=(), geolocation=(), payment=(), usb=()";
}
map $uri $toolbox_connect_sources {
default "'self'";
"~^/apps/rand(?:/|$)" "'self' https://www.random.org";
}
server {
listen 8080;
listen [::]:8080;
@@ -43,7 +38,7 @@ server {
add_header Cross-Origin-Resource-Policy $toolbox_resource_policy always;
add_header Access-Control-Allow-Origin $toolbox_access_control_allow_origin always;
add_header Permissions-Policy $toolbox_permissions_policy always;
add_header Content-Security-Policy "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; media-src 'self' blob:; font-src 'self' data:; connect-src $toolbox_connect_sources; worker-src 'self' blob:; manifest-src 'self'" always;
add_header Content-Security-Policy "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; media-src 'self' blob:; font-src 'self' data:; connect-src 'self'; worker-src 'self' blob:; manifest-src 'self'" always;
add_header Cache-Control $toolbox_cache_control always;
gzip on;