Slave/prod deploy #12
@@ -57,6 +57,8 @@ async function bootstrap() {
|
|||||||
credentials: true
|
credentials: true
|
||||||
});
|
});
|
||||||
|
|
||||||
|
app.set('trust proxy', 1);
|
||||||
|
|
||||||
await app.listen(port);
|
await app.listen(port);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -1,4 +1,4 @@
|
|||||||
import { Controller, Get, Header, Param, StreamableFile } from '@nestjs/common';
|
import { Controller, Get, Param, StreamableFile } from '@nestjs/common';
|
||||||
import { HotlinkImageParamsDto } from '../dto/HotlinkImageParamsDto';
|
import { HotlinkImageParamsDto } from '../dto/HotlinkImageParamsDto';
|
||||||
import { UploadService } from '../services/UploadService';
|
import { UploadService } from '../services/UploadService';
|
||||||
|
|
||||||
@@ -7,9 +7,6 @@ export class HotlinkImageController {
|
|||||||
constructor(private readonly uploadService: UploadService) {}
|
constructor(private readonly uploadService: UploadService) {}
|
||||||
|
|
||||||
@Get(':id/:secret')
|
@Get(':id/:secret')
|
||||||
@Header('X-Content-Type-Options', 'nosniff')
|
|
||||||
@Header('Content-Security-Policy', 'sandbox')
|
|
||||||
@Header('Referrer-Policy', 'no-referrer')
|
|
||||||
async getImage(@Param() params: HotlinkImageParamsDto): Promise<StreamableFile> {
|
async getImage(@Param() params: HotlinkImageParamsDto): Promise<StreamableFile> {
|
||||||
const { body, mimeType } = await this.uploadService.getHotlinkImage(params.id, params.secret);
|
const { body, mimeType } = await this.uploadService.getHotlinkImage(params.id, params.secret);
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user