diff options
| author | Marco Ambrosini <marcoambrosini@pm.me> | 2021-06-30 18:02:34 +0300 |
|---|---|---|
| committer | Joas Schilling <coding@schilljs.com> | 2021-07-01 17:06:00 +0300 |
| commit | 63fe1ac0d71cd660bee3df5ff3d304d5aca4871e (patch) | |
| tree | 456eb80f1cb7a1e20f9bfb439a81f0e63e55ac09 /lib | |
| parent | d2e2b14ced1ffa6f9f51f11d0233b038826fc31e (diff) | |
Use extended mediarecorder
Signed-off-by: Marco Ambrosini <marcoambrosini@pm.me>
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/Controller/PageController.php | 16 | ||||
| -rw-r--r-- | lib/Listener/CSPListener.php | 8 |
2 files changed, 24 insertions, 0 deletions
diff --git a/lib/Controller/PageController.php b/lib/Controller/PageController.php index 96b541de6..7cc11196c 100644 --- a/lib/Controller/PageController.php +++ b/lib/Controller/PageController.php @@ -262,6 +262,14 @@ class PageController extends Controller { $csp = new ContentSecurityPolicy(); $csp->addAllowedConnectDomain('*'); $csp->addAllowedMediaDomain('blob:'); + $csp->addAllowedWorkerSrcDomain('blob:'); + $csp->addAllowedWorkerSrcDomain("'self'"); + $csp->addAllowedChildSrcDomain('blob:'); + $csp->addAllowedChildSrcDomain("'self'"); + $csp->addAllowedScriptDomain('blob:'); + $csp->addAllowedScriptDomain("'self'"); + $csp->addAllowedConnectDomain('blob:'); + $csp->addAllowedConnectDomain("'self'"); $csp->addAllowedImageDomain('https://*.tile.openstreetmap.org'); $response->setContentSecurityPolicy($csp); return $response; @@ -315,6 +323,14 @@ class PageController extends Controller { $csp = new ContentSecurityPolicy(); $csp->addAllowedConnectDomain('*'); $csp->addAllowedMediaDomain('blob:'); + $csp->addAllowedWorkerSrcDomain('blob:'); + $csp->addAllowedWorkerSrcDomain("'self'"); + $csp->addAllowedChildSrcDomain('blob:'); + $csp->addAllowedChildSrcDomain("'self'"); + $csp->addAllowedScriptDomain('blob:'); + $csp->addAllowedScriptDomain("'self'"); + $csp->addAllowedConnectDomain('blob:'); + $csp->addAllowedConnectDomain("'self'"); $csp->addAllowedImageDomain('https://*.tile.openstreetmap.org'); $response->setContentSecurityPolicy($csp); return $response; diff --git a/lib/Listener/CSPListener.php b/lib/Listener/CSPListener.php index dfdbaff1f..3bc84138e 100644 --- a/lib/Listener/CSPListener.php +++ b/lib/Listener/CSPListener.php @@ -47,6 +47,14 @@ class CSPListener implements IEventListener { $csp = new ContentSecurityPolicy(); $csp->addAllowedImageDomain('https://*.tile.openstreetmap.org'); + $csp->addAllowedWorkerSrcDomain('blob:'); + $csp->addAllowedWorkerSrcDomain("'self'"); + $csp->addAllowedChildSrcDomain('blob:'); + $csp->addAllowedChildSrcDomain("'self'"); + $csp->addAllowedScriptDomain('blob:'); + $csp->addAllowedScriptDomain("'self'"); + $csp->addAllowedConnectDomain('blob:'); + $csp->addAllowedConnectDomain("'self'"); foreach ($this->config->getAllServerUrlsForCSP() as $server) { $csp->addAllowedConnectDomain($server); } |