From 403788039640d4f2c640c076309b6887809b5a54 Mon Sep 17 00:00:00 2001 From: Eduard Tihomirov Date: Thu, 13 Mar 2025 16:14:21 +0300 Subject: [PATCH] SUPPORT-8965: Fix --- config/nginx.conf | 4 ++-- frontend/index.webpack.html | 2 +- frontend/src/resources/app-config.json | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/config/nginx.conf b/config/nginx.conf index 341276d..7456593 100644 --- a/config/nginx.conf +++ b/config/nginx.conf @@ -81,7 +81,7 @@ http { index index.html; try_files $uri @index; - add_header Content-Security-Policy "frame-ancestors 'none'; default-src 'self'; connect-src 'self' https://e-trust.gosuslugi.ru; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:;"; + add_header Content-Security-Policy "frame-ancestors 'none'; default-src 'self'; connect-src 'self' http://xn--1-6tb.xn--b1afabzvcegckfhg.xn--p1ai/ https://xn--2-6tb.xn--b1afbulhcegckfhg.xn--p1ai/; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:;"; #Application config location = /src/resources/app-config.json { @@ -106,7 +106,7 @@ http { location @index { root /frontend; add_header Cache-Control "no-cache"; - add_header Content-Security-Policy "frame-ancestors 'none'; default-src 'self'; connect-src 'self' https://e-trust.gosuslugi.ru; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:;"; + add_header Content-Security-Policy "frame-ancestors 'none'; default-src 'self'; connect-src 'self' http://xn--1-6tb.xn--b1afabzvcegckfhg.xn--p1ai/ https://xn--2-6tb.xn--b1afbulhcegckfhg.xn--p1ai/; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:;"; expires 0; try_files /index.html =404; } diff --git a/frontend/index.webpack.html b/frontend/index.webpack.html index 91b9d2e..726f05e 100644 --- a/frontend/index.webpack.html +++ b/frontend/index.webpack.html @@ -5,7 +5,7 @@ + content="default-src 'self'; connect-src 'self' http://xn--1-6tb.xn--b1afabzvcegckfhg.xn--p1ai/ https://xn--2-6tb.xn--b1afbulhcegckfhg.xn--p1ai/; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:"/> diff --git a/frontend/src/resources/app-config.json b/frontend/src/resources/app-config.json index 7c783ca..0db11ef 100644 --- a/frontend/src/resources/app-config.json +++ b/frontend/src/resources/app-config.json @@ -17,6 +17,6 @@ "password_pattern_error": "Пароль должен содержать заглавные или прописные буквы и как минимум 1 цифру", "show.client.errors": false, "available_task.single_fetch": true, - "cert_check_url": "https://e-trust.gosuslugi.ru", + "cert_check_url": "http://xn--1-6tb.xn--b1afabzvcegckfhg.xn--p1ai/", "unknown.error.msg": "Система временно недоступна. Пожалуйста, повторите попытку позже." }