security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

treat mask-icon.svg as an implementation detail

Browse Source
This commit is contained in:
Daniel Micay 2021-05-18 14:02:38 -04:00
parent 9634d20dca
commit 5f018c01e1
2 changed files with 7 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
nginx/nginx.conf
View File

@ -238,6 +238,12 @@ http {
try_files /favicon.svg =404; try_files /favicon.svg =404;
} }
location = /mask-icon.svg {
include snippets/security-headers.conf;
add_header Cross-Origin-Resource-Policy "same-origin" always;
add_header Cache-Control "public, max-age=31536000, immutable";
}
location ^~ /fonts/ { location ^~ /fonts/ {
include snippets/security-headers.conf; include snippets/security-headers.conf;
add_header Cross-Origin-Resource-Policy "same-origin" always; add_header Cross-Origin-Resource-Policy "same-origin" always;
@ -258,13 +264,6 @@ http {
add_header Cache-Control "public, max-age=31536000, immutable"; add_header Cache-Control "public, max-age=31536000, immutable";
} }
location ~ "\.svg$" {
include snippets/security-headers.conf;
# avoid breaking image hotlinking such as https://github.com/TryGhost/Ghost/issues/12880
add_header Cross-Origin-Resource-Policy "cross-origin" always;
add_header Cache-Control "public, max-age=31536000";
}
location ~ "\.png$" { location ~ "\.png$" {
include snippets/security-headers.conf; include snippets/security-headers.conf;
# avoid breaking image hotlinking such as https://github.com/TryGhost/Ghost/issues/12880 # avoid breaking image hotlinking such as https://github.com/TryGhost/Ghost/issues/12880

2
process_static
View File

@ -18,7 +18,7 @@ find static_tmp -name '*.css' -exec csso {} -o {} \;
find static_tmp -name '*.js' -exec terser --module -cmo {} {} \; find static_tmp -name '*.js' -exec terser --module -cmo {} {} \;
replace="" replace=""
for file in static_tmp/**/*.css static_tmp/js/*.js; do for file in static_tmp/**/*.css static_tmp/js/*.js static_tmp/mask-icon.svg; do
hash=$(sha256sum "$file" | head -c 8) hash=$(sha256sum "$file" | head -c 8)
dest="$(dirname $file)/$hash.$(basename $file)" dest="$(dirname $file)/$hash.$(basename $file)"
mv "$file" "$dest" mv "$file" "$dest"