feat : comment feature

2026-10-08 01:40:08 +07:00
parent 8c8815cda5
commit 5812d99715
65 changed files with 27013 additions and 10 deletions
@@ -1,4 +1,5 @@
 export function securityHeaders(production: boolean, emojiImageCdn: string) {
+  const commentStorageOrigin = process.env.S3_PUBLIC_URL ? new URL(process.env.S3_PUBLIC_URL).origin : "";
  const ads = "https://*.googlesyndication.com https://*.doubleclick.net https://*.googleadservices.com https://*.googletagservices.com https://www.google.com";
  const cloudflareAnalytics = "https://static.cloudflareinsights.com";
  const adConnections = "https://*.adtrafficquality.google";
@@ -6,7 +7,7 @@ export function securityHeaders(production: boolean, emojiImageCdn: string) {
    "default-src 'self'",
    `script-src 'self' 'unsafe-inline' ${production ? "" : "'unsafe-eval'"} https://challenges.cloudflare.com ${cloudflareAnalytics} ${adConnections} ${ads}`,
    "style-src 'self' 'unsafe-inline'",
-    `img-src 'self' data: blob: https://buzz-cdn.astrxl.dev ${emojiImageCdn} ${ads}`,
+    `img-src 'self' data: blob: https://buzz-cdn.astrxl.dev ${commentStorageOrigin} ${emojiImageCdn} ${ads}`,
    "font-src 'self' data:",
    `connect-src 'self' https://buzz-cdn.astrxl.dev https://challenges.cloudflare.com ${adConnections} ${ads}${production ? "" : " ws: wss:"}`,
    `frame-src https://challenges.cloudflare.com https://www.youtube-nocookie.com ${ads}`,