path

package.json

@@ -39,6 +39,7 @@
     "is-ip": "^3.1.0",
     "jquery": "^3.4.1",
     "lusca": "^1.6.1",
+    "path": "^0.12.7",
     "svg-country-flags": "^1.2.6",
     "twig": "^1.13.3",
     "typescript": "^3.6.2"

src/app.ts

@@ -10,6 +10,8 @@ import compression from "compression";
 
 import { countries } from "countries-list";
 
+import path from "path";
+
 // import slugid from "slugid";
 import lusca from "lusca";
 
@@ -76,7 +78,7 @@ const ROOT_URL = production ? process.env.ROOT_URL : `http://localhost:${port}`;
 const app: express.Application = express();
 app.use(compression());
 
-app.use(express.static("public"));
+app.use(express.static(path.resolve("public")));
 
 // Assets
 // (also in nginx.conf)
@@ -125,7 +127,7 @@ app.use(/*(req: Request, res: Response, next: NextFunction) => {*/
     /* tslint:disable:object-literal-sort-keys */
     policy: {
       "default-src": "'none'",
-      "img-src": "'self' data:",
+      "img-src": "'self' data: https://screenshots.lelux.fi/api/png",
 
       "style-src": "'self' 'unsafe-inline'",
       "font-src": "'self'",

yarn.lock

@@ -2813,6 +2813,14 @@ path-to-regexp@0.1.7:
   resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-0.1.7.tgz#df604178005f522f15eb4490e7247a1bfaa67f8c"
   integrity sha1-32BBeABfUi8V60SQ5yR6G/qmf4w=
 
+path@^0.12.7:
+  version "0.12.7"
+  resolved "https://registry.yarnpkg.com/path/-/path-0.12.7.tgz#d4dc2a506c4ce2197eb481ebfcd5b36c0140b10f"
+  integrity sha1-1NwqUGxM4hl+tIHr/NWzbAFAsQ8=
+  dependencies:
+    process "^0.11.1"
+    util "^0.10.3"
+
 pify@^3.0.0:
   version "3.0.0"
   resolved "https://registry.yarnpkg.com/pify/-/pify-3.0.0.tgz#e5a4acd2c101fdf3d9a4d07f0dbc4db49dd28176"
@@ -2838,6 +2846,11 @@ process-nextick-args@~2.0.0:
   resolved "https://registry.yarnpkg.com/process-nextick-args/-/process-nextick-args-2.0.1.tgz#7820d9b16120cc55ca9ae7792680ae7dba6d7fe2"
   integrity sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==
 
+process@^0.11.1:
+  version "0.11.10"
+  resolved "https://registry.yarnpkg.com/process/-/process-0.11.10.tgz#7332300e840161bda3e69a1d1d91a7d4bc16f182"
+  integrity sha1-czIwDoQBYb2j5podHZGn1LwW8YI=
+
 proxy-addr@~2.0.5:
   version "2.0.5"
   resolved "https://registry.yarnpkg.com/proxy-addr/-/proxy-addr-2.0.5.tgz#34cbd64a2d81f4b1fd21e76f9f06c8a45299ee34"
@@ -3518,6 +3531,13 @@ util-deprecate@~1.0.1:
   resolved "https://registry.yarnpkg.com/util-deprecate/-/util-deprecate-1.0.2.tgz#450d4dc9fa70de732762fbd2d4a28981419a0ccf"
   integrity sha1-RQ1Nyfpw3nMnYvvS1KKJgUGaDM8=
 
+util@^0.10.3:
+  version "0.10.4"
+  resolved "https://registry.yarnpkg.com/util/-/util-0.10.4.tgz#3aa0125bfe668a4672de58857d3ace27ecb76901"
+  integrity sha512-0Pm9hTQ3se5ll1XihRic3FDIku70C+iHUdT/W926rSgHV5QgXsYbKZN8MSC3tJtSkhuROzvsQjAaFENRXr+19A==
+  dependencies:
+    inherits "2.0.3"
+
 utils-merge@1.0.1:
   version "1.0.1"
   resolved "https://registry.yarnpkg.com/utils-merge/-/utils-merge-1.0.1.tgz#9f95710f50a267947b2ccc124741c1028427e713"