From 629f4aeecb5b2d5c37cc22f381d6be74274b743f Mon Sep 17 00:00:00 2001
From: faulty <didier@faulty.nl>
Date: Wed, 1 Feb 2023 13:04:22 +0100
Subject: [PATCH] test this

---
 custom/cryptpad/Dockerfile           | 1 +
 custom/cryptpad/conf.d/cryptpad.conf | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/custom/cryptpad/Dockerfile b/custom/cryptpad/Dockerfile
index 86e355b..aa8cfbd 100644
--- a/custom/cryptpad/Dockerfile
+++ b/custom/cryptpad/Dockerfile
@@ -1,4 +1,5 @@
 FROM promasu/cryptpad:nginx
 
 COPY conf.d/cryptpad.conf /etc/nginx/conf.d/cryptpad.conf
+COPY config.js /cryptpad/custom/config.example.js
 COPY config.js /cryptpad/custom/config.js
\ No newline at end of file
diff --git a/custom/cryptpad/conf.d/cryptpad.conf b/custom/cryptpad/conf.d/cryptpad.conf
index b948ad6..4a16db0 100644
--- a/custom/cryptpad/conf.d/cryptpad.conf
+++ b/custom/cryptpad/conf.d/cryptpad.conf
@@ -162,7 +162,7 @@ server {
     # because of bugs in Chromium-based browsers that incorrectly ignore headers that are supposed to enable
     # the use of some modern APIs that we require when javascript is run in a cross-origin context.
     # We've applied other sandboxing techniques to mitigate the risk of running WebAssembly in this privileged scope
-    # if ($uri ~ ^\/unsafeiframe\/inner\.html.*$) { set $unsafe 1; }
+    if ($uri ~ ^\/unsafeiframe\/inner\.html.*$) { set $unsafe 1; }
 
     # privileged contexts allow a few more rights than unprivileged contexts, though limits are still applied
     if ($unsafe) {