HoovesSocial/hippofish
2
0
Fork 0
Code Issues 3 Pull requests 1 Projects Releases Packages Wiki Activity Actions

allow iframes for notes

Browse source
This commit is contained in:
ThatOneCalculator 2023-06-06 21:00:16 -07:00
parent abe8474883
commit 90c0e4e9ed
No known key found for this signature in database
GPG key ID: 8703CACD01000000
3 changed files with 6 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
packages/backend/src/server/api/endpoints/antennas/create.ts
View file

@ -107,10 +107,9 @@ export default define(meta, paramDef, async (ps, user) => {
userId: user.id, userId: user.id,
}); });
if (antennas.length > 5 && !user.isAdmin) { if (antennas.length > 5 && !user.isAdmin) {
throw new ApiError(meta.errors.tooManyAntennas) throw new ApiError(meta.errors.tooManyAntennas);
} }
if (ps.src === "list" && ps.userListId) { if (ps.src === "list" && ps.userListId) {
userList = await UserLists.findOneBy({ userList = await UserLists.findOneBy({
id: ps.userListId, id: ps.userListId,

4
packages/backend/src/server/web/index.ts
View file

@ -422,6 +422,10 @@ router.get("/notes/:note", async (ctx, next) => {
}); });
ctx.set("Cache-Control", "public, max-age=15"); ctx.set("Cache-Control", "public, max-age=15");
ctx.set(
"Content-Security-Policy",
"default-src 'self'; frame-ancestors '*'",
);
return; return;
} }

2
rome.json
View file

@ -13,7 +13,7 @@
"packages/*/package-lock.json", "packages/*/package-lock.json",
"packages/backend/src/server/web/manifest.ts", "packages/backend/src/server/web/manifest.ts",
"packages/backend/built/", "packages/backend/built/",
"packages/backend/nsfw-model/", "*/model.json",
"packages/client/src/emojilist.json", "packages/client/src/emojilist.json",
"*.md", "*.md",
"**/tsconfig.json", "**/tsconfig.json",