micord/ervu-lkrp-landing
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

SUPPORT-8965: Fix

Browse source
This commit is contained in:
Eduard Tihomirov 2025-02-27 10:48:36 +03:00
parent d459c0ce2a
commit 6e8856484e
3 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Dockerfile
View file

@ -7,4 +7,4 @@ ENV LKRP_UL_URL="https://lkrp-dev.micord.ru/ul/"
ENV LKRP_UL_LANDING="https://lkrp-dev.micord.ru/ul/#/home" ENV LKRP_UL_LANDING="https://lkrp-dev.micord.ru/ul/#/home"
ENV LKRP_FL_URL="https://lkrp-dev.micord.ru/fl/" ENV LKRP_FL_URL="https://lkrp-dev.micord.ru/fl/"
ENV LKRP_FL_LANDING="https://lkrp-dev.micord.ru/fl/#/home" ENV LKRP_FL_LANDING="https://lkrp-dev.micord.ru/fl/#/home"
ENV LKRP_CRT_CHECK_URL="https://lkrp-dev2.micord.ru" ENV LKRP_CRT_CHECK_URL="https://e-trust.gosuslugi.ru"

2
config/nginx.conf.template
View file

@ -57,7 +57,7 @@ server {
index index.html; index index.html;
expires -1; expires -1;
add_header Content-Security-Policy "frame-ancestors 'none'; default-src 'self'; connect-src 'self' https://www.sberbank.ru; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:;"; add_header Content-Security-Policy "frame-ancestors 'none'; default-src 'self'; connect-src 'self' https://e-trust.gosuslugi.ru; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:;";
# Media: images, icons, video, audio, HTC # Media: images, icons, video, audio, HTC
location ~* \.(?:jpg|jpeg|gif|png|ico|cur|gz|svg|svgz|mp4|mp3|ogg|ogv|webm|htc|woff2|woff|ttf)$ { location ~* \.(?:jpg|jpeg|gif|png|ico|cur|gz|svg|svgz|mp4|mp3|ogg|ogv|webm|htc|woff2|woff|ttf)$ {

2
html/index.html
View file

@ -5,7 +5,7 @@
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="viewport" content="width=device-width, initial-scale=1">
<meta http-equiv="Content-Security-Policy" <meta http-equiv="Content-Security-Policy"
content="default-src 'self'; connect-src 'self' https://www.sberbank.ru; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:"/> content="default-src 'self'; connect-src 'self' https://e-trust.gosuslugi.ru; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:"/>
<meta name="referrer" content="strict-origin-when-cross-origin"/> <meta name="referrer" content="strict-origin-when-cross-origin"/>
<script src="script/cert-checker.js"></script> <script src="script/cert-checker.js"></script>
</head> </head>