pepepper/fluxer
1
0
Fork 0
mirror of https://github.com/fluxerapp/fluxer synced 2026-10-07 19:22:14 +09:00
Code Issues Packages Projects Releases Wiki Activity

feat(captcha): make ALTCHA the only captcha (#3035)

Browse Source
This commit is contained in:
Hampus
2026-09-29 17:00:15 +02:00
committed by GitHub
parent d433a039b5
commit 4f968bbc47
209 changed files with 4097 additions and 8692 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fluxer_app_proxy/src/csp.rs
+8 -14
View File
@@ -25,9 +25,6 @@ pub struct RuntimeCspSources {
const FRAME_SOURCES: &[&str] = &[
"https://www.youtube.com/embed/",
"https://www.youtube.com/s/player/",
"https://hcaptcha.com",
"https://*.hcaptcha.com",
"https://challenges.cloudflare.com",
];
const IMAGE_SOURCES: &[&str] = &[
@@ -45,17 +42,10 @@ const MEDIA_SOURCES: &[&str] = &[
"https://fluxer.media",
];
const SCRIPT_SOURCES: &[&str] = &[
"https://*.fluxer.app",
"https://hcaptcha.com",
"https://*.hcaptcha.com",
"https://challenges.cloudflare.com",
];
const SCRIPT_SOURCES: &[&str] = &["https://*.fluxer.app"];
const STYLE_SOURCES: &[&str] = &[
"https://*.fluxer.app",
"https://hcaptcha.com",
"https://*.hcaptcha.com",
"https://fonts.googleapis.com",
"https://api.fonts.coollabs.io",
];
@@ -72,9 +62,6 @@ const CONNECT_SOURCES: &[&str] = &[
"https://*.fluxer.media",
"wss://*.fluxer.media",
"https://fluxer-uploads.ewr1.vultrobjects.com",
"https://hcaptcha.com",
"https://*.hcaptcha.com",
"https://challenges.cloudflare.com",
"https://fluxerstatus.com",
"https://fluxer.media",
];
@@ -395,6 +382,13 @@ mod tests {
assert!(!csp.contains("nonce-"));
}
#[test]
fn build_csp_allows_no_third_party_captcha_hosts() {
let csp = build_csp(&default_csp_config(), "test-nonce", &runtime_sources());
assert!(!csp.contains("hcaptcha"));
assert!(!csp.contains("challenges.cloudflare.com"));
}
#[test]
fn csp_no_double_spaces_or_trailing_semicolons() {
let config = default_csp_config();