Archive/screentinker
1
0
Fork 0
mirror of https://github.com/screentinker/screentinker.git synced 2026-08-16 23:33:10 -06:00
Code Issues Actions Packages Projects Releases Wiki Activity

.

Browse source
This commit is contained in:
xadyz1 2026-07-26 14:31:15 +01:00
parent 7aa5497360
commit 09eb887cf7
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

BIN
server/db/remote_display.db-client_wal_index
View file

Binary file not shown.

4
server/server.js
View file

@ -97,13 +97,13 @@ const dashboardCsp = helmet.contentSecurityPolicy({
// Both are required — with only the script entry the beacon loads but silently can't report.
scriptSrc: ["'self'", 'https://static.cloudflareinsights.com'],
scriptSrcAttr: ["'unsafe-inline'"],
styleSrc: ["'self'", "'unsafe-inline'"],
styleSrc: ["'self'", "'unsafe-inline'", "https://fonts.googleapis.com"],
styleSrcAttr: ["'unsafe-inline'"],
imgSrc: ["'self'", 'data:', 'blob:', 'https:'],
mediaSrc: ["'self'", 'blob:', 'https:'],
// 'wss:'/'ws:' keep the dashboard's socket.io connection working; the CF entry lets the beacon report.
connectSrc: ["'self'", 'wss:', 'ws:', 'https:', 'https://cloudflareinsights.com'],
fontSrc: ["'self'", 'data:'],
fontSrc: ["'self'", 'data:', 'https://fonts.gstatic.com'],
frameSrc: ["'self'", 'https://www.youtube.com', 'https://youtube.com'],
objectSrc: ["'none'"],
baseUri: ["'self'"],