Update WebSecurityConfig.kt

kdhkr · kdhkr · commit 80152004b762 · 2025-02-28T22:04:32.000-10:00
diff --git a/src/main/kotlin/me/kkutuio/kkutuweb/config/WebSecurityConfig.kt b/src/main/kotlin/me/kkutuio/kkutuweb/config/WebSecurityConfig.kt
@@ -19,7 +19,7 @@ class WebSecurityConfig : WebSecurityConfigurerAdapter() {
             .headers()
                 .frameOptions().disable()
                 .contentSecurityPolicy(
-                    "default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.kkutu.io https://browser.sentry-cdn.com https://static.cloudflareinsights.com/beacon.min.js https://t1.daumcdn.net https://www.google-analytics.com/analytics.js https://www.googletagmanager.com https://www.pagespeed-mod.com https://cdn.portone.io https://challenges.cloudflare.com/turnstile/v0/api.js https://storage.googleapis.com/workbox-cdn/releases/ https://pagead2.googlesyndication.com/pagead/ https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com/ads/ https://s0.2mdn.net; style-src 'unsafe-inline' 'self' https://cdn.jsdelivr.net/gh/orioncactus/pretendard@v1.3.9/ https://fonts.googleapis.com/css2 https://cdn.kkutu.io; object-src https://cdn.kkutu.io; base-uri 'self'; connect-src 'self' https://cdn.kkutu.io https://cloudflareinsights.com https://o1271663.ingest.sentry.io https://stats.g.doubleclick.net https://pagead2.googlesyndication.com wss://ws.kkutu.io:* wss://global.kkutu.io:* wss://test.kkutu.io:* https://static.kkutu.io https://www.google-analytics.com https://display.ad.daum.net https://aem-ingest.onkakao.net https://aem-kakao-collector.onkakao.net https://analytics.google.com https://csi.gstatic.com https://cafeproxy.kkutuio.workers.dev; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net/gh/orioncactus/pretendard@v1.3.9/ https://fonts.googleapis.com/css2 https://cdn.kkutu.io; frame-src 'self' https://cdn.kkutu.io https://static.kkutu.io https://t1.daumcdn.net https://www.google.com https://challenges.cloudflare.com https://youtube.com https://www.youtube.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com; img-src 'self' 'unsafe-inline' https://cdn.kkutu.io https://www.google-analytics.com https://cdn.discordapp.com https://k.kakaocdn.net https://img.youtube.com https://cafethumb.pstatic.net https://lh3.googleusercontent.com https://phinf.pstatic.net https://www.googletagmanager.com https://pagead2.googlesyndication.com data:; manifest-src 'self' https://cdn.kkutu.io; media-src 'self' https://cdn.kkutu.io https://pub-e336c74b058c476bb58f9267c51fbab4.r2.dev"
+                    "default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.kkutu.io https://browser.sentry-cdn.com https://static.cloudflareinsights.com https://t1.daumcdn.net https://www.google-analytics.com/analytics.js https://www.googletagmanager.com https://www.pagespeed-mod.com https://cdn.portone.io https://challenges.cloudflare.com/turnstile/v0/api.js https://storage.googleapis.com/workbox-cdn/releases/ https://pagead2.googlesyndication.com/pagead/ https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com/ads/ https://s0.2mdn.net; style-src 'unsafe-inline' 'self' https://cdn.jsdelivr.net/gh/orioncactus/pretendard@v1.3.9/ https://fonts.googleapis.com/css2 https://cdn.kkutu.io; object-src https://cdn.kkutu.io; base-uri 'self'; connect-src 'self' https://cdn.kkutu.io https://cloudflareinsights.com https://o1271663.ingest.sentry.io https://stats.g.doubleclick.net https://pagead2.googlesyndication.com wss://ws.kkutu.io:* wss://global.kkutu.io:* wss://test.kkutu.io:* https://static.kkutu.io https://www.google-analytics.com https://display.ad.daum.net https://aem-ingest.onkakao.net https://aem-kakao-collector.onkakao.net https://analytics.google.com https://csi.gstatic.com https://cafeproxy.kkutuio.workers.dev; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net/gh/orioncactus/pretendard@v1.3.9/ https://fonts.googleapis.com/css2 https://cdn.kkutu.io; frame-src 'self' https://cdn.kkutu.io https://static.kkutu.io https://t1.daumcdn.net https://www.google.com https://challenges.cloudflare.com https://youtube.com https://www.youtube.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com; img-src 'self' 'unsafe-inline' https://cdn.kkutu.io https://www.google-analytics.com https://cdn.discordapp.com https://k.kakaocdn.net https://img.youtube.com https://cafethumb.pstatic.net https://lh3.googleusercontent.com https://phinf.pstatic.net https://www.googletagmanager.com https://pagead2.googlesyndication.com data:; manifest-src 'self' https://cdn.kkutu.io; media-src 'self' https://cdn.kkutu.io https://pub-e336c74b058c476bb58f9267c51fbab4.r2.dev"
                 );
     }
 }

Original file line number	Diff line number	Diff line change
`@@ -19,7 +19,7 @@ class WebSecurityConfig : WebSecurityConfigurerAdapter() {`
`19`	`19`	`.headers()`
`20`	`20`	`.frameOptions().disable()`
`21`	`21`	`.contentSecurityPolicy(`
`22`		- "default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.kkutu.io https://browser.sentry-cdn.com https://static.cloudflareinsights.com/beacon.min.js https://t1.daumcdn.net https://www.google-analytics.com/analytics.js https://www.googletagmanager.com https://www.pagespeed-mod.com https://cdn.portone.io https://challenges.cloudflare.com/turnstile/v0/api.js https://storage.googleapis.com/workbox-cdn/releases/ https://pagead2.googlesyndication.com/pagead/ https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com/ads/ https://s0.2mdn.net; style-src 'unsafe-inline' 'self' https://cdn.jsdelivr.net/gh/orioncactus/[email protected]/ https://fonts.googleapis.com/css2 https://cdn.kkutu.io; object-src https://cdn.kkutu.io; base-uri 'self'; connect-src 'self' https://cdn.kkutu.io https://cloudflareinsights.com https://o1271663.ingest.sentry.io https://stats.g.doubleclick.net https://pagead2.googlesyndication.com wss://ws.kkutu.io:* wss://global.kkutu.io:* wss://test.kkutu.io:* https://static.kkutu.io https://www.google-analytics.com https://display.ad.daum.net https://aem-ingest.onkakao.net https://aem-kakao-collector.onkakao.net https://analytics.google.com https://csi.gstatic.com https://cafeproxy.kkutuio.workers.dev; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net/gh/orioncactus/[email protected]/ https://fonts.googleapis.com/css2 https://cdn.kkutu.io; frame-src 'self' https://cdn.kkutu.io https://static.kkutu.io https://t1.daumcdn.net https://www.google.com https://challenges.cloudflare.com https://youtube.com https://www.youtube.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com; img-src 'self' 'unsafe-inline' https://cdn.kkutu.io https://www.google-analytics.com https://cdn.discordapp.com https://k.kakaocdn.net https://img.youtube.com https://cafethumb.pstatic.net https://lh3.googleusercontent.com https://phinf.pstatic.net https://www.googletagmanager.com https://pagead2.googlesyndication.com data:; manifest-src 'self' https://cdn.kkutu.io; media-src 'self' https://cdn.kkutu.io https://pub-e336c74b058c476bb58f9267c51fbab4.r2.dev"
	`22`	+ "default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.kkutu.io https://browser.sentry-cdn.com https://static.cloudflareinsights.com https://t1.daumcdn.net https://www.google-analytics.com/analytics.js https://www.googletagmanager.com https://www.pagespeed-mod.com https://cdn.portone.io https://challenges.cloudflare.com/turnstile/v0/api.js https://storage.googleapis.com/workbox-cdn/releases/ https://pagead2.googlesyndication.com/pagead/ https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com/ads/ https://s0.2mdn.net; style-src 'unsafe-inline' 'self' https://cdn.jsdelivr.net/gh/orioncactus/[email protected]/ https://fonts.googleapis.com/css2 https://cdn.kkutu.io; object-src https://cdn.kkutu.io; base-uri 'self'; connect-src 'self' https://cdn.kkutu.io https://cloudflareinsights.com https://o1271663.ingest.sentry.io https://stats.g.doubleclick.net https://pagead2.googlesyndication.com wss://ws.kkutu.io:* wss://global.kkutu.io:* wss://test.kkutu.io:* https://static.kkutu.io https://www.google-analytics.com https://display.ad.daum.net https://aem-ingest.onkakao.net https://aem-kakao-collector.onkakao.net https://analytics.google.com https://csi.gstatic.com https://cafeproxy.kkutuio.workers.dev; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net/gh/orioncactus/[email protected]/ https://fonts.googleapis.com/css2 https://cdn.kkutu.io; frame-src 'self' https://cdn.kkutu.io https://static.kkutu.io https://t1.daumcdn.net https://www.google.com https://challenges.cloudflare.com https://youtube.com https://www.youtube.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com; img-src 'self' 'unsafe-inline' https://cdn.kkutu.io https://www.google-analytics.com https://cdn.discordapp.com https://k.kakaocdn.net https://img.youtube.com https://cafethumb.pstatic.net https://lh3.googleusercontent.com https://phinf.pstatic.net https://www.googletagmanager.com https://pagead2.googlesyndication.com data:; manifest-src 'self' https://cdn.kkutu.io; media-src 'self' https://cdn.kkutu.io https://pub-e336c74b058c476bb58f9267c51fbab4.r2.dev"
`23`	`23`	`);`
`24`	`24`	`}`
`25`	`25`	`}`