dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Allow to add URLs in CSP from-action from the request object (#1480)

Browse Source
This commit is contained in:
Clément OUDOT 2018-08-28 18:22:55 +02:00
parent 5beb432750
commit 46702f3a62
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Lib/Choice.pm
View File

@ -177,6 +177,7 @@ sub _buildAuthLoop {
$req->env->{'REQUEST_URI'} ) )
{
$url .= $req->env->{'REQUEST_URI'};
$req->{cspFormAction} .= " $url";
}
else {
$url .= '#';

5
lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Run.pm
View File

@ -738,6 +738,11 @@ sub sendHtml {
$csp .= " $url";
}
}
if ( defined $req->{cspFormAction} ) {
$self->logger->debug(
"Set CSP form-action with request URL: " . $req->{cspFormAction} );
$csp .= " " . $req->{cspFormAction};
}
$csp .= ';';
# Deny using portal in frame except if it is required