Skip to content

Commit e8d055c

Browse files
authored
chore: SECFIND-505 disallow raw access (#199)
To follow the best security practices, this PR disallows access to the frontends of the examples in this repo without checking the certificate. See https://internetcomputer.org/docs/building-apps/frontends/asset-security for further information.
1 parent af7c5e6 commit e8d055c

File tree

6 files changed

+6
-0
lines changed

6 files changed

+6
-0
lines changed

examples/basic_bls_signing/frontend/public/.ic-assets.json5

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,5 +5,6 @@
55
headers: {
66
"Content-Security-Policy": "default-src 'self';script-src 'self';connect-src 'self' http://localhost:* https://icp0.io https://*.icp0.io https://icp-api.io;img-src 'self';object-src 'none';base-uri 'self';frame-ancestors 'none';form-action 'self';upgrade-insecure-requests;",
77
},
8+
allow_raw_access: false
89
},
910
]

examples/basic_ibe/frontend/public/.ic-assets.json5

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,5 +5,6 @@
55
headers: {
66
"Content-Security-Policy": "default-src 'self';script-src 'self';connect-src 'self' http://localhost:* https://icp0.io https://*.icp0.io https://icp-api.io;img-src 'self';object-src 'none';base-uri 'self';frame-ancestors 'none';form-action 'self';upgrade-insecure-requests;",
77
},
8+
allow_raw_access: false
89
},
910
]

examples/basic_timelock_ibe/frontend/public/.ic-assets.json5

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,5 +5,6 @@
55
headers: {
66
"Content-Security-Policy": "default-src 'self';script-src 'self';connect-src 'self' http://localhost:* https://icp0.io https://*.icp0.io https://icp-api.io;img-src 'self';object-src 'none';base-uri 'self';frame-ancestors 'none';form-action 'self';upgrade-insecure-requests;",
77
},
8+
allow_raw_access: false
89
},
910
]

examples/encrypted_notes_dapp_vetkd/frontend/public/.ic-assets.json5

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,5 +5,6 @@
55
headers: {
66
"Content-Security-Policy": "default-src 'self';script-src 'self';connect-src 'self' http://localhost:* https://icp0.io https://*.icp0.io https://icp-api.io;img-src 'self';style-src * 'unsafe-inline';object-src 'none';base-uri 'self';frame-ancestors 'none';form-action 'self';upgrade-insecure-requests;",
77
},
8+
allow_raw_access: false
89
},
910
]

examples/password_manager/frontend/public/.ic-assets.json5

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,5 +5,6 @@
55
headers: {
66
"Content-Security-Policy": "default-src 'self';script-src 'self';connect-src 'self' http://localhost:* https://icp0.io https://*.icp0.io https://icp-api.io;img-src 'self' data:;style-src * 'unsafe-inline';object-src 'none';base-uri 'self';frame-ancestors 'none';form-action 'self';upgrade-insecure-requests;",
77
},
8+
allow_raw_access: false
89
},
910
]

examples/password_manager_with_metadata/frontend/public/.ic-assets.json5

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,5 +5,6 @@
55
headers: {
66
"Content-Security-Policy": "default-src 'self';script-src 'self';connect-src 'self' http://localhost:* https://icp0.io https://*.icp0.io https://icp-api.io;img-src 'self' data:;style-src * 'unsafe-inline';object-src 'none';base-uri 'self';frame-ancestors 'none';form-action 'self';upgrade-insecure-requests;",
77
},
8+
allow_raw_access: false
89
},
910
]

0 commit comments

Comments
 (0)