pk/atst
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #1204 from dod-ccpo/fix-upload-header

Browse Source 
Fix Upload Header
This commit is contained in:
tomdds 2019-11-22 11:57:53 -05:00 committed by GitHub
commit 9b59e803d1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
atst/app.py
View File

@ -128,6 +128,7 @@ def make_flask_callbacks(app):
def set_default_headers(app): # pragma: no cover def set_default_headers(app): # pragma: no cover
static_url = app.config.get("STATIC_URL") static_url = app.config.get("STATIC_URL")
blob_storage_url = app.config.get("BLOB_STORAGE_URL")
@app.after_request @app.after_request
def _set_security_headers(response): def _set_security_headers(response):
@ -146,7 +147,7 @@ def set_default_headers(app): # pragma: no cover
else: else:
response.headers[ response.headers[
"Content-Security-Policy" "Content-Security-Policy"
] = f"default-src 'self' 'unsafe-eval' 'unsafe-inline' {static_url}" ] = f"default-src 'self' 'unsafe-eval' 'unsafe-inline' {blob_storage_url} {static_url}"
return response return response

1
config/base.ini
View File

@ -1,5 +1,6 @@
[default] [default]
ASSETS_URL ASSETS_URL
BLOB_STORAGE_URL=http://localhost:8000/
CAC_URL = http://localhost:8000/login-redirect CAC_URL = http://localhost:8000/login-redirect
CA_CHAIN = ssl/server-certs/ca-chain.pem CA_CHAIN = ssl/server-certs/ca-chain.pem
CDN_ORIGIN=http://localhost:8000 CDN_ORIGIN=http://localhost:8000

1
deploy/azure/atst-envvars-configmap.yml
View File

@ -6,6 +6,7 @@ metadata:
namespace: atat namespace: atat
data: data:
ASSETS_URL: https://atat-cdn.azureedge.net/ ASSETS_URL: https://atat-cdn.azureedge.net/
BLOB_STORAGE_URL: https://atat.blob.core.windows.net/
CELERY_DEFAULT_QUEUE: celery-master CELERY_DEFAULT_QUEUE: celery-master
CDN_ORIGIN: https://azure.atat.code.mil CDN_ORIGIN: https://azure.atat.code.mil
CSP: azure CSP: azure