glass beadian
fe5f2403d6
- api: matrix-sso module (tuwunel jwt -> login/get_token), POST /matrix/session, GET /matrix/identity, drive controller - web: /chat full-height Element view, /files Library+Drive tabs, embedded-app frame component - edge: /hub-sso.html handshake route (origin-pinned CSP), X-Frame-Options strip on files - oCIS: csp.yaml frame-ancestors app.occupymedia.cc - server config still required: tuwunel [global.jwt], MATRIX_SSO_JWT_SECRET, oCIS restart
15 lines
646 B
YAML
15 lines
646 B
YAML
# Minimal ownCloud Web CSP with the office frame origin; oCIS expands ${VAR}.
|
|
directives:
|
|
default-src: ["'none'"]
|
|
child-src: ["'self'"]
|
|
connect-src: ["'self'", "blob:"]
|
|
font-src: ["'self'", "data:"]
|
|
# The Hub's in-app Drive view (app.occupymedia.cc/files/drive) frames oCIS web.
|
|
frame-ancestors: ["'self'", "https://app.occupymedia.cc"]
|
|
frame-src: ["'self'", "blob:", "https://${OFFICE_HOST}"]
|
|
img-src: ["'self'", "data:", "blob:", "https://${OFFICE_HOST}"]
|
|
manifest-src: ["'self'"]
|
|
media-src: ["'self'"]
|
|
object-src: ["'self'", "blob:"]
|
|
script-src: ["'self'", "'unsafe-inline'"]
|
|
style-src: ["'self'", "'unsafe-inline'"]
|