summaryrefslogtreecommitdiff
path: root/service/pixelated/resources/sandbox_resource.py
diff options
context:
space:
mode:
authorKali Kaneko <kali@leap.se>2017-07-25 11:40:11 -0400
committerKali Kaneko <kali@leap.se>2017-07-25 11:40:29 -0400
commit91e4481c450eb7eb928debc1cb7fa59bdb63dd7b (patch)
tree8fd7e6e77b6df669c33d96b7edad6db3cbe14dfe /service/pixelated/resources/sandbox_resource.py
parente4f755309d4cf5cfb6b0bcc62ed73d6070956ab5 (diff)
[pkg] packaging and path changes
- move all the pixelated python package under src/ - move the pixelated_www package under the leap namespace - allow to set globally the static folder - add hours and minutes to the timestamp in package version, to allow for several releases a day.
Diffstat (limited to 'service/pixelated/resources/sandbox_resource.py')
-rw-r--r--service/pixelated/resources/sandbox_resource.py37
1 files changed, 0 insertions, 37 deletions
diff --git a/service/pixelated/resources/sandbox_resource.py b/service/pixelated/resources/sandbox_resource.py
deleted file mode 100644
index 35f99774..00000000
--- a/service/pixelated/resources/sandbox_resource.py
+++ /dev/null
@@ -1,37 +0,0 @@
-#
-# Copyright (c) 2016 ThoughtWorks, Inc.
-#
-# Pixelated is free software: you can redistribute it and/or modify
-# it under the terms of the GNU Affero General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# Pixelated is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-# GNU Affero General Public License for more details.
-#
-# You should have received a copy of the GNU Affero General Public License
-# along with Pixelated. If not, see <http://www.gnu.org/licenses/>.
-
-from twisted.web.static import File
-
-
-class SandboxResource(File):
- CSP_HEADER_VALUES = "sandbox allow-popups allow-scripts;" \
- "default-src 'self';" \
- "style-src *;" \
- "script-src *;" \
- "font-src *;" \
- "img-src *;" \
- "object-src 'none';" \
- "connect-src 'none';"
-
- def render_GET(self, request):
- request.setHeader('Content-Security-Policy', self.CSP_HEADER_VALUES)
- request.setHeader('X-Content-Security-Policy', self.CSP_HEADER_VALUES)
- request.setHeader('X-Webkit-CSP', self.CSP_HEADER_VALUES)
- request.setHeader('Access-Control-Allow-Origin', '*')
- request.setHeader('Access-Control-Allow-Methods', 'GET')
-
- return super(SandboxResource, self).render_GET(request)