wassname/talk
1
0
Fork 0
mirror of https://github.com/wassname/talk.git synced 2026-08-12 12:30:39 +08:00
Code Issues Packages Projects Releases Wiki Activity

csp fixes

Browse Source
This commit is contained in:
Wyatt Johnson
2018-05-24 14:34:13 -06:00
parent e39bcb11ba
commit f8cc658c54
1 changed files with 13 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
routes/api/v1/csp.js
+13 -8
View File
@@ -4,13 +4,18 @@ const { logger } = require('../../../services/logging');
const router = express.Router();
const schema = Joi.object().keys({
'csp-report': Joi.object().keys({
'document-uri': Joi.string(),
referrer: Joi.string(),
'blocked-uri': Joi.string(),
'violated-directive': Joi.string(),
'original-policy': Joi.string(),
}),
'csp-report': Joi.object()
.keys({
'document-uri': Joi.string(),
referrer: Joi.string().allow(''),
'blocked-uri': Joi.string(),
'violated-directive': Joi.string(),
'original-policy': Joi.string(),
'script-sample': Joi.string()
.allow('')
.optional(),
})
.optionalKeys('referrer', 'script-sample'),
});
const json = express.json({ type: 'application/csp-report' });
@@ -18,7 +23,7 @@ const json = express.json({ type: 'application/csp-report' });
router.post('/', json, async (req, res, next) => {
const { value, error: err } = Joi.validate(req.body, schema, {
stripUnknown: true,
presence: 'required',
presence: 'optional',
});
if (err) {
res.status(400).end();