mirror/poke
1
0
Fork 0
mirror of https://codeberg.org/ashley/poke.git synced 2024-11-10 04:08:39 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

add hsts lol

Browse source
This commit is contained in:
Ashley 2023-01-12 20:11:35 +00:00
parent f06eea836c
commit b330146c73
1 changed files with 14 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
server.js
View file

@ -32,7 +32,6 @@
const media_proxy = require("./src/libpoketube/libpoketube-video.js"); const media_proxy = require("./src/libpoketube/libpoketube-video.js");
const { sinit } = require("./src/libpoketube/init/superinit.js"); const { sinit } = require("./src/libpoketube/init/superinit.js");
const u = await media_proxy(); const u = await media_proxy();
initlog("Loading..."); initlog("Loading...");
initlog( initlog(
"[Welcome] Welcome To PokeTube :3 " + "[Welcome] Welcome To PokeTube :3 " +
@ -68,6 +67,7 @@
app.use(modules.express.urlencoded({ extended: true })); // for parsing application/x-www-form-urlencoded app.use(modules.express.urlencoded({ extended: true })); // for parsing application/x-www-form-urlencoded
app.use(modules.useragent.express()); app.use(modules.useragent.express());
app.use(modules.express.json()); // for parsing application/json app.use(modules.express.json()); // for parsing application/json
app.enable("trust proxy");
const renderTemplate = async (res, req, template, data = {}) => { const renderTemplate = async (res, req, template, data = {}) => {
res.render( res.render(
@ -101,6 +101,19 @@ this is our config file,you can change stuff here
app.use(function (req, res, next) { app.use(function (req, res, next) {
res.header("Access-Control-Allow-Origin", "*"); res.header("Access-Control-Allow-Origin", "*");
if (req.secure) {
res.header(
"Strict-Transport-Security",
"max-age=31536000; includeSubDomains; preload"
);
}
next();
});
app.use(function (request, response, next) {
if (process.env.NODE_ENV != "development" && !request.secure) {
return response.redirect("https://" + request.headers.host + request.url);
}
next(); next();
}); });