Kronecker/KF-OnlineJudge
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(proxy): preserve security headers across cache locations

Browse Source
This commit is contained in:
Kronecker
2026-10-14 15:02:55 +08:00
parent f269a39bbe
commit d3ef4f03aa
2 changed files with 39 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/release/proxy.py
+8
View File
@@ -73,6 +73,8 @@ def render(release_id: str, value: dict) -> bytes:
proxy_cache off;
proxy_hide_header Cache-Control;
add_header Cache-Control "no-store" always;
add_header X-Content-Type-Options nosniff always;
add_header X-Frame-Options DENY always;
""".replace("HOST", host)
return (
"""worker_processes 1;
@@ -142,15 +144,21 @@ http {
location ~ \\.(js|mjs|css|woff2|svg|png|jpg|jpeg|ico|json|map)$ {
try_files $uri =404;
add_header Cache-Control "public, max-age=31536000, immutable";
add_header X-Content-Type-Options nosniff always;
add_header X-Frame-Options DENY always;
}
location = /admin { return 308 /admin/; }
location /admin/ {
try_files $uri $uri/ /admin/index.html;
add_header Cache-Control "no-cache" always;
add_header X-Content-Type-Options nosniff always;
add_header X-Frame-Options DENY always;
}
location / {
try_files $uri $uri/ /index.html;
add_header Cache-Control "no-cache" always;
add_header X-Content-Type-Options nosniff always;
add_header X-Frame-Options DENY always;
}
}
}