Daniel García
					
					4 years ago
					
				 
				
			 
		 
		
			
				
					
					No known key found for this signature in database
					
						
							GPG Key ID: FC8A7D14C3CD543A
						
					
				
			
		
		
		
	
		
			
				 1 changed files with 
4 additions and 
1 deletions
			 
			
		 
		
			
				- 
					
					
					 
					src/util.rs
				
 
			
		
		
			
			
			
			
			
			
				
				
					
						
							
								
									
	
		
		
			
				
					| 
						
						
							
								
							
						
						
					 | 
					@ -30,7 +30,10 @@ impl Fairing for AppHeaders { | 
				
			
			
		
	
		
		
			
				
					 | 
					 | 
					        res.set_raw_header("X-Content-Type-Options", "nosniff"); | 
					 | 
					 | 
					        res.set_raw_header("X-Content-Type-Options", "nosniff"); | 
				
			
			
		
	
		
		
			
				
					 | 
					 | 
					        res.set_raw_header("X-XSS-Protection", "1; mode=block"); | 
					 | 
					 | 
					        res.set_raw_header("X-XSS-Protection", "1; mode=block"); | 
				
			
			
		
	
		
		
			
				
					 | 
					 | 
					        let csp = format!( | 
					 | 
					 | 
					        let csp = format!( | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					            "frame-ancestors 'self' chrome-extension://nngceckbapebfimnlniiiahkandclblb moz-extension://* {};", | 
					 | 
					 | 
					            // Chrome Web Store: https://chrome.google.com/webstore/detail/bitwarden-free-password-m/nngceckbapebfimnlniiiahkandclblb
 | 
				
			
			
				
				
			
		
	
		
		
	
		
		
			
				
					 | 
					 | 
					 | 
					 | 
					 | 
					            // Edge Add-ons: https://microsoftedge.microsoft.com/addons/detail/bitwarden-free-password/jbkfoedolllekgbhcbcoahefnbanhhlh?hl=en-US
 | 
				
			
			
		
	
		
		
			
				
					 | 
					 | 
					 | 
					 | 
					 | 
					            // Firefox Browser Add-ons: https://addons.mozilla.org/en-US/firefox/addon/bitwarden-password-manager/
 | 
				
			
			
		
	
		
		
			
				
					 | 
					 | 
					 | 
					 | 
					 | 
					            "frame-ancestors 'self' chrome-extension://nngceckbapebfimnlniiiahkandclblb chrome-extension://jbkfoedolllekgbhcbcoahefnbanhhlh moz-extension://* {};", | 
				
			
			
		
	
		
		
			
				
					 | 
					 | 
					            CONFIG.allowed_iframe_ancestors() | 
					 | 
					 | 
					            CONFIG.allowed_iframe_ancestors() | 
				
			
			
		
	
		
		
			
				
					 | 
					 | 
					        ); | 
					 | 
					 | 
					        ); | 
				
			
			
		
	
		
		
			
				
					 | 
					 | 
					        res.set_raw_header("Content-Security-Policy", csp); | 
					 | 
					 | 
					        res.set_raw_header("Content-Security-Policy", csp); | 
				
			
			
		
	
	
		
		
			
				
					| 
						
							
								
							
						
						
						
					 | 
					
  |