feat: added csp and minor changes

This commit is contained in:
=
2025-01-04 00:29:37 +05:30
parent 4359eb7313
commit c25c84aeb3
8 changed files with 42 additions and 23 deletions

View File

@@ -4,6 +4,21 @@
<meta charset="UTF-8" />
<link rel="icon" href="/infisical.ico" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<meta
http-equiv="Content-Security-Policy"
content="
default-src 'self';
connect-src 'self' https://*.posthog.com http://127.0.0.1:* https://cdn.jsdelivr.net/npm/@lottiefiles/dotlottie-web@0.38.2/dist/dotlottie-player.wasm;
script-src 'self' https://*.posthog.com https://js.stripe.com https://api.stripe.com https://widget.intercom.io https://js.intercomcdn.com https://hcaptcha.com https://*.hcaptcha.com 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net/npm/@lottiefiles/dotlottie-web@0.38.2/dist/dotlottie-player.wasm;
style-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com;
child-src https://api.stripe.com;
frame-src https://js.stripe.com/ https://api.stripe.com https://www.youtube.com/ https://hcaptcha.com https://*.hcaptcha.com;
connect-src 'self' wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://api.heroku.com/ https://id.heroku.com/oauth/authorize https://id.heroku.com/oauth/token https://checkout.stripe.com https://app.posthog.com https://api.stripe.com https://api.pwnedpasswords.com http://127.0.0.1:* https://hcaptcha.com https://*.hcaptcha.com;
img-src 'self' https://static.intercomassets.com https://js.intercomcdn.com https://downloads.intercomcdn.com https://*.stripe.com https://i.ytimg.com/ data:;
media-src https://js.intercomcdn.com;
font-src 'self' https://fonts.intercomcdn.com/ https://fonts.gstatic.com;
"
/>
<title>Infisical</title>
</head>
<body>

View File

@@ -101,4 +101,3 @@ export default function TeamInviteStep(): JSX.Element {
</div>
);
}

View File

@@ -68,4 +68,4 @@ export const UpgradePlanModal = ({ text, isOpen, onOpenChange }: Props): JSX.Ele
</ModalContent>
</Modal>
);
};
};

View File

@@ -1,9 +1,7 @@
import { createFileRoute } from '@tanstack/react-router'
import { createFileRoute } from "@tanstack/react-router";
import { OverviewPage } from './OverviewPage'
import { OverviewPage } from "./OverviewPage";
export const Route = createFileRoute(
'/_authenticate/_inject-org-details/admin/_admin-layout/',
)({
component: OverviewPage,
})
export const Route = createFileRoute("/_authenticate/_inject-org-details/admin/_admin-layout/")({
component: OverviewPage
});

View File

@@ -1,16 +1,14 @@
import { createFileRoute, redirect } from '@tanstack/react-router'
import { createFileRoute, redirect } from "@tanstack/react-router";
import { AdminLayout } from '@app/layouts/AdminLayout'
import { AdminLayout } from "@app/layouts/AdminLayout";
export const Route = createFileRoute(
'/_authenticate/_inject-org-details/admin/_admin-layout',
)({
export const Route = createFileRoute("/_authenticate/_inject-org-details/admin/_admin-layout")({
component: AdminLayout,
beforeLoad: ({ context }) => {
if (!context.user.superAdmin) {
throw redirect({
to: '/organization/secret-manager/overview',
})
to: "/organization/secret-manager/overview"
});
}
},
})
}
});

View File

@@ -1,7 +1,17 @@
import { createFileRoute } from "@tanstack/react-router";
import { createFileRoute, stripSearchParams } from "@tanstack/react-router";
import { zodValidator } from "@tanstack/zod-adapter";
import { z } from "zod";
import { LoginLdapPage } from "./LoginLDAPPage";
export const Route = createFileRoute("/_restrict-login-signup/login/ldap")({
component: LoginLdapPage
const LoginLdapPageQueryParamsSchema = z.object({
organizationSlug: z.string().catch("")
});
export const Route = createFileRoute("/_restrict-login-signup/login/ldap")({
component: LoginLdapPage,
validateSearch: zodValidator(LoginLdapPageQueryParamsSchema),
search: {
middlewares: [stripSearchParams({ organizationSlug: "" })]
}
});

View File

@@ -46,4 +46,3 @@ export const useNavigateToSelectOrganization = () => {
return { navigateToSelectOrganization };
};

View File

@@ -187,4 +187,4 @@ export const EmailConfirmationStep = ({
</div>
</div>
);
};
};