aboutsummaryrefslogtreecommitdiff
path: root/conf
diff options
context:
space:
mode:
authoranmol26s <github@datamol.org>2018-09-03 16:22:31 +0530
committeranmol26s <github@datamol.org>2018-09-03 16:22:31 +0530
commit91ddc5f6f22530c1ea274a964975747153801787 (patch)
tree5f7d4369c315624a208bcce7c5dcc018369585a2 /conf
parentc458202b011dd67611a96d03aaeae65c235d3d38 (diff)
downloadmastodon_ynh-91ddc5f6f22530c1ea274a964975747153801787.tar.gz
mastodon_ynh-91ddc5f6f22530c1ea274a964975747153801787.tar.bz2
mastodon_ynh-91ddc5f6f22530c1ea274a964975747153801787.zip
Updated to version 2.5.0
Diffstat (limited to 'conf')
-rw-r--r--conf/app-mastodon.src4
-rw-r--r--conf/nginx.conf3
2 files changed, 5 insertions, 2 deletions
diff --git a/conf/app-mastodon.src b/conf/app-mastodon.src
index a63adff..32aa8c6 100644
--- a/conf/app-mastodon.src
+++ b/conf/app-mastodon.src
@@ -1,5 +1,5 @@
-SOURCE_URL=https://github.com/tootsuite/mastodon/archive/v2.4.5.tar.gz
-SOURCE_SUM=9e8cf6a808c9c34b6b609e8acc86b91a02227580b61221d96a4b78560fcc592c
+SOURCE_URL=https://github.com/tootsuite/mastodon/archive/v2.5.0.tar.gz
+SOURCE_SUM=0b36693058647ab50fff7f1c0c678f0f2b2997908c542c488386e8e16beced74
SOURCE_SUM_PRG=sha256sum
SOURCE_FORMAT=tar.gz
SOURCE_IN_SUBDIR=true
diff --git a/conf/nginx.conf b/conf/nginx.conf
index a183a31..156d56d 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -1,6 +1,9 @@
# upload max size
client_max_body_size 100M;
+# Content Security Policy : security to avoid launching unsecure script
+add_header Content-Security-Policy "default-src 'none'; font-src 'self'; media-src 'self'; object-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self'; img-src 'self' blob: data:; connect-src 'self' wss://__DOMAIN__;";
+
# add to v1.4 assets
root __FINALPATH__/live/public;