From 7c9142f7fe2ea2fbc34fbd4176847054ab1e9be5 Mon Sep 17 00:00:00 2001
From: Julen Landa Alustiza <jlanda@fedoraproject.org>
Date: Thu, 1 Aug 2019 08:05:59 +0200
Subject: [PATCH] pagure: tune csp headers on stg

---
 roles/pagure/frontend/templates/pagure.cfg | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/roles/pagure/frontend/templates/pagure.cfg b/roles/pagure/frontend/templates/pagure.cfg
index 98dc5e0c0..74b6d42c4 100644
--- a/roles/pagure/frontend/templates/pagure.cfg
+++ b/roles/pagure/frontend/templates/pagure.cfg
@@ -367,3 +367,17 @@ REPOSPANNER_REGIONS = {
 
 GIT_AUTH_BACKEND = 'pagure'
 HTTP_REPO_ACCESS_GITOLITE = None
+
+{% if env == 'pagure-staging' %}
+CSP_HEADERS = (
+    "default-src 'self';"
+    "script-src 'self' '{nonce_script}'; "
+    "style-src 'self' '{nonce_style}'; "
+    "object-src 'none';"
+    "base-uri 'self';"
+    "img-src 'self' https://seccdn.libravatar.org;"
+    "connect-src 'self' https://stg.pagure.io:8088;"
+    "frame-src https://docs.stg.pagure.org;"
+    "frame-ancestors https://stg.pagure.io;"
+)
+{% endif %}
\ No newline at end of file
-- 
2.21.0