zias/serengo
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix:csp issue

Browse Source
This commit is contained in:
ッ
2025-10-07 14:41:17 +02:00
parent a806664ce3
commit 63f7e0cc4c
2 changed files with 19 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
src/hooks.server.ts
View File

@@ -46,14 +46,15 @@ export const handle: Handle = async ({ event, resolve }) => {
response.headers.set( response.headers.set(
'Content-Security-Policy', 'Content-Security-Policy',
"default-src 'self'; " + "default-src 'self'; " +
"script-src 'self' 'unsafe-inline' 'unsafe-eval'; " + "script-src 'self' 'unsafe-inline' 'unsafe-eval'; " +
"style-src 'self' 'unsafe-inline' fonts.googleapis.com; " + "worker-src 'self' blob:; " +
"font-src 'self' fonts.gstatic.com; " + "style-src 'self' 'unsafe-inline' fonts.googleapis.com; " +
"img-src 'self' data: blob: *.openstreetmap.org *.tile.openstreetmap.org; " + "font-src 'self' fonts.gstatic.com; " +
"connect-src 'self' *.openstreetmap.org; " + "img-src 'self' data: blob: *.openstreetmap.org *.tile.openstreetmap.org; " +
"frame-ancestors 'none'; " + "connect-src 'self' *.openstreetmap.org; " +
"base-uri 'self'; " + "frame-ancestors 'none'; " +
"form-action 'self';" "base-uri 'self'; " +
"form-action 'self';"
); );
response.headers.set('X-Frame-Options', 'DENY'); response.headers.set('X-Frame-Options', 'DENY');

19
src/service-worker.ts
View File

@@ -26,11 +26,7 @@ const ASSETS = [
]; ];
// Assets to precache for better performance // Assets to precache for better performance
const CRITICAL_ASSETS = [ const CRITICAL_ASSETS = ['/cafe-bg-compressed.jpg', '/fonts/Washington.ttf', '/logo.svg'];
'/cafe-bg-compressed.jpg',
'/fonts/Washington.ttf',
'/logo.svg'
];
self.addEventListener('install', (event) => { self.addEventListener('install', (event) => {
// Create a new cache and add all files to it // Create a new cache and add all files to it
@@ -47,7 +43,12 @@ self.addEventListener('install', (event) => {
try { try {
const response = await fetch(asset); const response = await fetch(asset);
if (response.ok) { if (response.ok) {
if (asset.includes('jpg') || asset.includes('jpeg') || asset.includes('png') || asset.includes('webp')) { if (
asset.includes('jpg') ||
asset.includes('jpeg') ||
asset.includes('png') ||
asset.includes('webp')
) {
await imageCache.put(asset, response); await imageCache.put(asset, response);
} else { } else {
await cache.put(asset, response); await cache.put(asset, response);
@@ -163,9 +164,9 @@ self.addEventListener('fetch', (event) => {
} catch (err) { } catch (err) {
// Try all caches for fallback // Try all caches for fallback
const cachedResponse = const cachedResponse =
await cache.match(event.request) || (await cache.match(event.request)) ||
await runtimeCache.match(event.request) || (await runtimeCache.match(event.request)) ||
await imageCache.match(event.request); (await imageCache.match(event.request));
if (cachedResponse) { if (cachedResponse) {
return cachedResponse; return cachedResponse;