* Fri Jan 03 2025 Jean-Philippe Pialasse <jpp@koozali.org> 1.6-5.sme

- set more relaxed CSP for roundcube [SME: 12861]
This commit is contained in:
Jean-Philippe Pialasse 2025-01-03 14:48:56 -05:00
parent 7f03032404
commit b6255d91c3
2 changed files with 10 additions and 1 deletions

View File

@ -23,6 +23,12 @@
} else {
$OUT .= " Alias /$place $dirs{$place}\n";
}
$OUT .= " <Location '/$place'>\n";
# strict CSP not yet supported see https://github.com/roundcube/roundcubemail/issues/6202 and few others
$OUT .= " Header set Content-Security-Policy \"default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self'; frame-src 'self'; connect-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self';\"\n";
$OUT .= " </Location>\n";
}
}

View File

@ -1,6 +1,6 @@
%define name smeserver-roundcube
%define version 1.6
%define release 4
%define release 5
Summary: smserver rpm to setup roundcube, an IMAP mail client
Name: %{name}
@ -85,6 +85,9 @@ fi
%attr(755,root,root) /usr/bin/rcplugin_update.sh
%changelog
* Fri Jan 03 2025 Jean-Philippe Pialasse <jpp@koozali.org> 1.6-5.sme
- set more relaxed CSP for roundcube [SME: 12861]
* Sat Dec 14 2024 Jean-Philippe Pialasse <jpp@koozali.org> 1.6-4.sme
- fix roundcube not working on initial install [SME: 12812]