Andreas/wekan
1
0
Fork 0
mirror of https://github.com/wekan/wekan.git synced 2026-01-30 21:25:17 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

Removed browser contect policy so that attachments would be visible.

Browse source 
Thanks to xet7 !

Fixes #4468
This commit is contained in:
Lauri Ojansivu 2022-04-08 17:52:27 +03:00
parent 939976ce88
commit 8a39a52d5d
3 changed files with 7 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

13
server/policy.js
View file

@ -1,12 +1,16 @@
import { BrowserPolicy } from 'meteor/browser-policy-common';
//import { BrowserPolicy } from 'meteor/browser-policy-common';
Meteor.startup(() => {
/*
// Default allowed
BrowserPolicy.content.allowInlineScripts();
BrowserPolicy.content.allowEval();
BrowserPolicy.content.allowInlineStyles();
BrowserPolicy.content.allowSameOriginForAll();
BrowserPolicy.content.allowOriginForAll('*');
// Allow all images from anywhere
BrowserPolicy.content.allowImageOrigin('*');
BrowserPolicy.content.allowDataUrlForAll();
*/
if (process.env.BROWSER_POLICY_ENABLED === 'true') {
// Trusted URL that can embed Wekan in iFrame.
@ -23,11 +27,8 @@ Meteor.startup(() => {
// Disable browser policy and allow all framing and including.
// Use only at internal LAN, not at Internet.
BrowserPolicy.framing.allowAll();
//BrowserPolicy.content.allowDataUrlForAll();
}
// Allow all images from anywhere
//BrowserPolicy.content.allowImageOrigin('*');
// If Matomo URL is set, allow it.
const matomoUrl = process.env.MATOMO_ADDRESS;