mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-09-22 13:39:35 +00:00
feat: added csp and minor changes
This commit is contained in:
@@ -4,6 +4,21 @@
|
||||
<meta charset="UTF-8" />
|
||||
<link rel="icon" href="/infisical.ico" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
||||
<meta
|
||||
http-equiv="Content-Security-Policy"
|
||||
content="
|
||||
default-src 'self';
|
||||
connect-src 'self' https://*.posthog.com http://127.0.0.1:* https://cdn.jsdelivr.net/npm/@lottiefiles/dotlottie-web@0.38.2/dist/dotlottie-player.wasm;
|
||||
script-src 'self' https://*.posthog.com https://js.stripe.com https://api.stripe.com https://widget.intercom.io https://js.intercomcdn.com https://hcaptcha.com https://*.hcaptcha.com 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net/npm/@lottiefiles/dotlottie-web@0.38.2/dist/dotlottie-player.wasm;
|
||||
style-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com;
|
||||
child-src https://api.stripe.com;
|
||||
frame-src https://js.stripe.com/ https://api.stripe.com https://www.youtube.com/ https://hcaptcha.com https://*.hcaptcha.com;
|
||||
connect-src 'self' wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://api.heroku.com/ https://id.heroku.com/oauth/authorize https://id.heroku.com/oauth/token https://checkout.stripe.com https://app.posthog.com https://api.stripe.com https://api.pwnedpasswords.com http://127.0.0.1:* https://hcaptcha.com https://*.hcaptcha.com;
|
||||
img-src 'self' https://static.intercomassets.com https://js.intercomcdn.com https://downloads.intercomcdn.com https://*.stripe.com https://i.ytimg.com/ data:;
|
||||
media-src https://js.intercomcdn.com;
|
||||
font-src 'self' https://fonts.intercomcdn.com/ https://fonts.gstatic.com;
|
||||
"
|
||||
/>
|
||||
<title>Infisical</title>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -101,4 +101,3 @@ export default function TeamInviteStep(): JSX.Element {
|
||||
</div>
|
||||
);
|
||||
}
|
||||
|
||||
|
||||
@@ -68,4 +68,4 @@ export const UpgradePlanModal = ({ text, isOpen, onOpenChange }: Props): JSX.Ele
|
||||
</ModalContent>
|
||||
</Modal>
|
||||
);
|
||||
};
|
||||
};
|
||||
|
||||
@@ -1,9 +1,7 @@
|
||||
import { createFileRoute } from '@tanstack/react-router'
|
||||
import { createFileRoute } from "@tanstack/react-router";
|
||||
|
||||
import { OverviewPage } from './OverviewPage'
|
||||
import { OverviewPage } from "./OverviewPage";
|
||||
|
||||
export const Route = createFileRoute(
|
||||
'/_authenticate/_inject-org-details/admin/_admin-layout/',
|
||||
)({
|
||||
component: OverviewPage,
|
||||
})
|
||||
export const Route = createFileRoute("/_authenticate/_inject-org-details/admin/_admin-layout/")({
|
||||
component: OverviewPage
|
||||
});
|
||||
|
||||
@@ -1,16 +1,14 @@
|
||||
import { createFileRoute, redirect } from '@tanstack/react-router'
|
||||
import { createFileRoute, redirect } from "@tanstack/react-router";
|
||||
|
||||
import { AdminLayout } from '@app/layouts/AdminLayout'
|
||||
import { AdminLayout } from "@app/layouts/AdminLayout";
|
||||
|
||||
export const Route = createFileRoute(
|
||||
'/_authenticate/_inject-org-details/admin/_admin-layout',
|
||||
)({
|
||||
export const Route = createFileRoute("/_authenticate/_inject-org-details/admin/_admin-layout")({
|
||||
component: AdminLayout,
|
||||
beforeLoad: ({ context }) => {
|
||||
if (!context.user.superAdmin) {
|
||||
throw redirect({
|
||||
to: '/organization/secret-manager/overview',
|
||||
})
|
||||
to: "/organization/secret-manager/overview"
|
||||
});
|
||||
}
|
||||
},
|
||||
})
|
||||
}
|
||||
});
|
||||
|
||||
@@ -1,7 +1,17 @@
|
||||
import { createFileRoute } from "@tanstack/react-router";
|
||||
import { createFileRoute, stripSearchParams } from "@tanstack/react-router";
|
||||
import { zodValidator } from "@tanstack/zod-adapter";
|
||||
import { z } from "zod";
|
||||
|
||||
import { LoginLdapPage } from "./LoginLDAPPage";
|
||||
|
||||
export const Route = createFileRoute("/_restrict-login-signup/login/ldap")({
|
||||
component: LoginLdapPage
|
||||
const LoginLdapPageQueryParamsSchema = z.object({
|
||||
organizationSlug: z.string().catch("")
|
||||
});
|
||||
|
||||
export const Route = createFileRoute("/_restrict-login-signup/login/ldap")({
|
||||
component: LoginLdapPage,
|
||||
validateSearch: zodValidator(LoginLdapPageQueryParamsSchema),
|
||||
search: {
|
||||
middlewares: [stripSearchParams({ organizationSlug: "" })]
|
||||
}
|
||||
});
|
||||
|
||||
@@ -46,4 +46,3 @@ export const useNavigateToSelectOrganization = () => {
|
||||
|
||||
return { navigateToSelectOrganization };
|
||||
};
|
||||
|
||||
|
||||
@@ -187,4 +187,4 @@ export const EmailConfirmationStep = ({
|
||||
</div>
|
||||
</div>
|
||||
);
|
||||
};
|
||||
};
|
||||
|
||||
Reference in New Issue
Block a user