* Thu Jun 05 2025 Jean-Philippe Pialasse <jpp@koozali.org> 1.6.0-12.sme

- CSP workaround [SME: 13025]
2025-06-05 23:49:41 -04:00
parent 4a0ae54def
commit da040fc79e
2 changed files with 7 additions and 2 deletions
--- a/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/86Phpldapadmin
+++ b/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/86Phpldapadmin
@@ -3,8 +3,10 @@
 <Directory /usr/share/phpldapadmin>
    SSLRequireSSL on
    Options -Indexes
+    {# this is a workaround waiting for a better phpldapadmin version
+}Header set Content-Security-Policy "default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ;  style-src 'self'  'unsafe-inline' "
    AllowOverride None
-      Require { (($phpldapadmin{access} || 'private' ) eq "public" ) ?  "all granted": "ip $localAccess $externalSSLAccess";}
+    Require { (($phpldapadmin{access} || 'private' ) eq "public" ) ?  "all granted": "ip $localAccess $externalSSLAccess";}
 {
 # we use the ldap auth now
 #    AuthName "phpLdapAdmin"