agw/overleaf-cep
1
0
Fork 0
mirror of https://github.com/yu-i-i/overleaf-cep.git synced 2026-05-23 17:19:37 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #18732 from overleaf/jpa-server-pro-csp

Browse Source 
[server-ce] enable CSP by default in Server CE/Pro

GitOrigin-RevId: 8c7664a39f688a748f33e3158b594b9368457661
This commit is contained in:
Jakob Ackermann
2024-06-05 13:58:54 +02:00
committed by Copybot
parent dd7970c11d
commit 06607b5c51
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
server-ce/config/settings.js
View File

@@ -208,6 +208,10 @@ const settings = {
process.env.OVERLEAF_SESSION_SECRET || process.env.CRYPTO_RANDOM,
},
csp: {
enabled: process.env.OVERLEAF_CSP_ENABLED !== 'false',
},
// These credentials are used for authenticating api requests
// between services that may need to go over public channels
httpAuthUsers,