netbird/plugins
0
0
Fork 0
mirror of https://github.com/netbirdio/plugins.git synced 2026-05-22 18:44:07 -07:00
Code Issues Packages Projects Releases Wiki Activity

www/nginx: style sweep

Browse Source
This commit is contained in:
Franco Fichtner
2022-01-17 08:14:31 +01:00
parent ecd6015598
commit 1ab87794b3
1 changed files with 32 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
www/nginx/src/opnsense/mvc/app/controllers/OPNsense/Nginx/Api/SettingsController.php
+32 -11
View File
@@ -342,11 +342,14 @@ class SettingsController extends ApiMutableModelControllerBase
// http security headers
public function searchsecurityHeaderAction()
{
$data = $this->searchBase('security_header',
$data = $this->searchBase(
'security_header',
['description', 'referrer', 'xssprotection', 'strict_transport_security_time',
'enable_csp', 'csp_report_only', 'csp_default_src_enabled', 'csp_script_src_enabled', 'csp_img_src_enabled',
'csp_style_src_enabled', 'csp_media_src_enabled', 'csp_font_src_enabled', 'csp_frame_src_enabled',
'csp_frame_ancestors_enabled', 'csp_form_action_enabled']);
'csp_frame_ancestors_enabled',
'csp_form_action_enabled']
);
// Create "hsts" column (disabled/time)
foreach ($data['rows'] as &$row) {
@@ -374,15 +377,33 @@ class SettingsController extends ApiMutableModelControllerBase
foreach ($data['rows'] as &$row) {
if ($row['enable_csp']) {
$enabled = [];
if ($row['csp_default_src_enabled']) $enabled[] = gettext("Default Source");
if ($row['csp_script_src_enabled']) $enabled[] = gettext("Script Source");
if ($row['csp_img_src_enabled']) $enabled[] = gettext("Image Source");
if ($row['csp_style_src_enabled']) $enabled[] = gettext("Style Source");
if ($row['csp_media_src_enabled']) $enabled[] = gettext("Media Source");
if ($row['csp_font_src_enabled']) $enabled[] = gettext("Font Source");
if ($row['csp_frame_src_enabled']) $enabled[] = gettext("Frame Source");
if ($row['csp_frame_ancestors_enabled']) $enabled[] = gettext("Frame Ancestors");
if ($row['csp_form_action_enabled']) $enabled[] = gettext("Form Action");
if ($row['csp_default_src_enabled']) {
$enabled[] = gettext("Default Source");
}
if ($row['csp_script_src_enabled']) {
$enabled[] = gettext("Script Source");
}
if ($row['csp_img_src_enabled']) {
$enabled[] = gettext("Image Source");
}
if ($row['csp_style_src_enabled']) {
$enabled[] = gettext("Style Source");
}
if ($row['csp_media_src_enabled']) {
$enabled[] = gettext("Media Source");
}
if ($row['csp_font_src_enabled']) {
$enabled[] = gettext("Font Source");
}
if ($row['csp_frame_src_enabled']) {
$enabled[] = gettext("Frame Source");
}
if ($row['csp_frame_ancestors_enabled']) {
$enabled[] = gettext("Frame Ancestors");
}
if ($row['csp_form_action_enabled']) {
$enabled[] = gettext("Form Action");
}
if (count($enabled)) {
$row['csp_details'] = implode(', ', $enabled);