test this

This commit is contained in:
Didier Slof 2023-02-01 13:04:22 +01:00
parent db98ee173e
commit 629f4aeecb
Signed by: didier
GPG key ID: 01E71F18AA4398E5
2 changed files with 2 additions and 1 deletions

View file

@ -1,4 +1,5 @@
FROM promasu/cryptpad:nginx FROM promasu/cryptpad:nginx
COPY conf.d/cryptpad.conf /etc/nginx/conf.d/cryptpad.conf COPY conf.d/cryptpad.conf /etc/nginx/conf.d/cryptpad.conf
COPY config.js /cryptpad/custom/config.example.js
COPY config.js /cryptpad/custom/config.js COPY config.js /cryptpad/custom/config.js

View file

@ -162,7 +162,7 @@ server {
# because of bugs in Chromium-based browsers that incorrectly ignore headers that are supposed to enable # because of bugs in Chromium-based browsers that incorrectly ignore headers that are supposed to enable
# the use of some modern APIs that we require when javascript is run in a cross-origin context. # the use of some modern APIs that we require when javascript is run in a cross-origin context.
# We've applied other sandboxing techniques to mitigate the risk of running WebAssembly in this privileged scope # We've applied other sandboxing techniques to mitigate the risk of running WebAssembly in this privileged scope
# if ($uri ~ ^\/unsafeiframe\/inner\.html.*$) { set $unsafe 1; } if ($uri ~ ^\/unsafeiframe\/inner\.html.*$) { set $unsafe 1; }
# privileged contexts allow a few more rights than unprivileged contexts, though limits are still applied # privileged contexts allow a few more rights than unprivileged contexts, though limits are still applied
if ($unsafe) { if ($unsafe) {