Merge branch 'develop' into dist/eole/2.6.2/develop

Work around CSP form-action issue with CAS.
Replace header with nicer values
2019-09-13 16:08:34 +02:00 · 2019-09-13 16:02:48 +02:00 · 2019-07-22 15:53:56 +02:00
2 changed files with 4 additions and 0 deletions
--- a/debian/eole-lemonldap.install
+++ b/debian/eole-lemonldap.install
@ -0,0 +1 @@
+usr
--- a/tmpl/portal-nginx.conf
+++ b/tmpl/portal-nginx.conf
@ -4,6 +4,7 @@
 #  default           "";
 #  ~/CN=(?<CN>[^/]+) $CN;
 #}
+%set %%webDomain = %%authWebName.split('.',1)[1]

 server {
  listen 80;
@ -40,6 +41,8 @@ server {
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_split_path_info ^(.*\.psgi)(/.*)$;
    fastcgi_param PATH_INFO  $fastcgi_path_info;
+    fastcgi_hide_header Content-Security-Policy;
+    add_header Content-Security-Policy "default-src 'self'; form-action 'self' http://*.%%webDomain https://*.%%webDomain; object-src 'none'";

  }
Author	SHA1	Message	Date
Philippe Caseiro	11aca56f4e	Merge branch 'develop' into dist/eole/2.6.2/develop	2019-09-13 16:08:34 +02:00
Philippe Caseiro	cc1da0773b	Work around CSP form-action issue with CAS. Replace header with nicer values	2019-09-13 16:02:48 +02:00
Philippe Caseiro	85f8f7b079	adding install file for eole-lemonldap package	2019-07-22 15:53:56 +02:00