feat: integrate authored nightdrive soundtrack

This commit is contained in:
2026-09-04 14:39:28 +03:00
parent eb7f276b91
commit 745fa8169e
39 changed files with 1013 additions and 714 deletions

View File

@@ -48,7 +48,7 @@ export function verifyNoJavaScriptDocument(html) {
function verifySecurityHeaders(response, expectedDigest) {
requireHeader(response, 'x-portfolio-manifest-digest', expectedDigest);
const csp = requireHeader(response, 'content-security-policy', /default-src 'self'/u);
for (const directive of ["connect-src 'none'", "object-src 'none'", "base-uri 'none'", "frame-ancestors 'none'", "form-action 'self'", 'upgrade-insecure-requests']) {
for (const directive of ["connect-src 'self'", "object-src 'none'", "base-uri 'none'", "frame-ancestors 'none'", "form-action 'self'", 'upgrade-insecure-requests']) {
if (!csp.includes(directive)) throw new Error(`Content-Security-Policy lacks ${directive}.`);
}
if (/unsafe-inline|unsafe-eval|\*/u.test(csp)) throw new Error('Content-Security-Policy contains an unsafe source expression.');