sjw/pleroma
1
0
Fork 0
mirror of https://git.pleroma.social/sjw/pleroma.git synced 2024-12-27 23:45:10 +01:00
Code Issues Releases Wiki Activity

csp plug: add sts support

Browse Source
This commit is contained in:
William Pitcock 2018-11-11 06:50:28 +00:00
parent a2bf5426cb
commit 331cf6ada1
1 changed files with 18 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
lib/pleroma/plugs/csp_plug.ex
View File

@ -1,10 +1,17 @@
defmodule Pleroma.Plugs.CSPPlug do
alias Pleroma.Config
import Plug.Conn
def init(opts), do: opts
def call(conn, options) do
conn = merge_resp_headers(conn, headers())
if Config.get([:csp, :enabled]) do
conn =
merge_resp_headers(conn, headers())
|> maybe_send_sts_header(Config.get([:csp, :sts]))
else
conn
end
end
defp headers do
@ -35,4 +42,14 @@ defmodule Pleroma.Plugs.CSPPlug do
]
|> Enum.join("; ")
end
defp maybe_send_sts_header(conn, true) do
max_age = Config.get([:csp, :sts_max_age])
merge_resp_headers(conn, [
{"strict-transport-security", "max-age=#{max_age}; includeSubDomains"}
])
end
defp maybe_send_sts_header(conn, _), do: conn
end