Fixing providers's thumbnails and adding security headers

This commit is contained in:
Zoe Roux 2021-03-15 22:02:01 +01:00
parent fdf2f37ceb
commit d38926924c
2 changed files with 14 additions and 14 deletions

View File

@ -107,12 +107,12 @@ namespace Kyoo.Controllers
if (provider.Logo == null) if (provider.Logo == null)
return provider; return provider;
string root = _config.GetValue<string>("peoplePath"); string root = _config.GetValue<string>("providerPath");
string localPath = Path.Combine(root, provider.Slug + ".jpg"); string localPath = Path.Combine(root, provider.Slug + ".jpg");
Directory.CreateDirectory(root); Directory.CreateDirectory(root);
if (alwaysDownload || !File.Exists(localPath)) if (alwaysDownload || !File.Exists(localPath))
await DownloadImage(provider.Logo, localPath, $"The thumbnail of {provider.Slug}"); await DownloadImage(provider.Logo, localPath, $"The logo of {provider.Slug}");
return provider; return provider;
} }

View File

@ -191,18 +191,18 @@ namespace Kyoo
app.UseRouting(); app.UseRouting();
// app.Use((ctx, next) => app.Use((ctx, next) =>
// { {
// ctx.Response.Headers.Remove("X-Powered-By"); ctx.Response.Headers.Remove("X-Powered-By");
// ctx.Response.Headers.Remove("Server"); ctx.Response.Headers.Remove("Server");
// ctx.Response.Headers.Add("Feature-Policy", "autoplay 'self'; fullscreen"); ctx.Response.Headers.Add("Feature-Policy", "autoplay 'self'; fullscreen");
// ctx.Response.Headers.Add("Content-Security-Policy", "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'"); ctx.Response.Headers.Add("Content-Security-Policy", "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'");
// ctx.Response.Headers.Add("X-Frame-Options", "SAMEORIGIN"); ctx.Response.Headers.Add("X-Frame-Options", "SAMEORIGIN");
// ctx.Response.Headers.Add("Referrer-Policy", "no-referrer"); ctx.Response.Headers.Add("Referrer-Policy", "no-referrer");
// ctx.Response.Headers.Add("Access-Control-Allow-Origin", "null"); ctx.Response.Headers.Add("Access-Control-Allow-Origin", "null");
// ctx.Response.Headers.Add("X-Content-Type-Options", "nosniff"); ctx.Response.Headers.Add("X-Content-Type-Options", "nosniff");
// return next(); return next();
// }); });
app.UseResponseCompression(); app.UseResponseCompression();
app.UseCookiePolicy(new CookiePolicyOptions app.UseCookiePolicy(new CookiePolicyOptions
{ {