sudacode/ghostfolio
1
0
Fork 0
Code Issues Pull Requests Actions Packages Releases Activity

Release 1.283.5 (#2103)

Browse Source
This commit is contained in:
Thomas Kaul 2023-06-25 13:39:39 +02:00 committed by GitHub
parent 2ecc8dbc4e
commit 51ca26bb4d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 15 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG.md
View File

@ -5,7 +5,7 @@ All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
## 1.283.4 - 2023-06-24 ## 1.283.5 - 2023-06-25
### Added ### Added

24
apps/api/src/main.ts
View File

@ -35,18 +35,20 @@ async function bootstrap() {
// Support 10mb csv/json files for importing activities // Support 10mb csv/json files for importing activities
app.use(bodyParser.json({ limit: '10mb' })); app.use(bodyParser.json({ limit: '10mb' }));
app.use( if (configService.get<string>('ENABLE_FEATURE_SUBSCRIPTION') === 'true') {
helmet({ app.use(
contentSecurityPolicy: { helmet({
directives: { contentSecurityPolicy: {
frameSrc: ["'self'", 'https://js.stripe.com'], // Allow loading frames from Stripe directives: {
scriptSrc: ["'self'", "'unsafe-inline'", 'https://js.stripe.com'], // Allow inline scripts and scripts from Stripe frameSrc: ["'self'", 'https://js.stripe.com'], // Allow loading frames from Stripe
scriptSrcAttr: ["'self'", "'unsafe-inline'"], // Allow inline event handlers scriptSrc: ["'self'", "'unsafe-inline'", 'https://js.stripe.com'], // Allow inline scripts and scripts from Stripe
styleSrc: ["'self'", "'unsafe-inline'"] // Allow inline styles scriptSrcAttr: ["'self'", "'unsafe-inline'"], // Allow inline event handlers
styleSrc: ["'self'", "'unsafe-inline'"] // Allow inline styles
}
} }
} })
}) );
); }
const BASE_CURRENCY = configService.get<string>('BASE_CURRENCY'); const BASE_CURRENCY = configService.get<string>('BASE_CURRENCY');
const HOST = configService.get<string>('HOST') || '0.0.0.0'; const HOST = configService.get<string>('HOST') || '0.0.0.0';

2
package.json
View File

@ -1,6 +1,6 @@
{ {
"name": "ghostfolio", "name": "ghostfolio",
"version": "1.283.4", "version": "1.283.5",
"homepage": "https://ghostfol.io", "homepage": "https://ghostfol.io",
"license": "AGPL-3.0", "license": "AGPL-3.0",
"scripts": { "scripts": {