hennery-kernel 0.1.3

Storage, authentication, HTTP kernel and embedded UI for hennery
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37

//! Kernel spec §7.2: every HTML response carries the
//! `Content-Security-Policy`. One layer over the whole router sets it, so a
//! page cannot be added without it.

use axum::http::{HeaderValue, header};
use axum::response::Response;

/// Kernel spec §7.2's policy. No page has an inline script, so it names no
/// hash: the web UI's theme bootstrap is a file of its own (`/theme.js`).
/// Everything else comes from this origin: scripts, styles, fonts, API
/// calls and form targets (plan 4b).
pub const POLICY: &str = "script-src 'self'; worker-src 'self'; manifest-src 'self'; default-src 'self'; connect-src 'self'; img-src 'self' data: blob:; \
     object-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'";

/// The policy of a hat's logo (plan 4d-B2; the security review's A9): it
/// is served from this origin, so opened as a page it must still run
/// nothing, load nothing and be framed nowhere, whatever it holds.
pub const LOGO_POLICY: &str = "default-src 'none'; sandbox; frame-ancestors 'none'";

/// The worker can execute and fetch only from its own origin.
pub const WORKER_POLICY: &str = "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'";

/// Set `POLICY` on a `text/html` response. Use as
/// `axum::middleware::map_response(csp::on_html)`, outermost.
pub async fn on_html(mut response: Response) -> Response {
    let is_html = response
        .headers()
        .get(header::CONTENT_TYPE)
        .and_then(|t| t.to_str().ok())
        .is_some_and(|t| t.trim_start().to_ascii_lowercase().starts_with("text/html"));
    if is_html {
        response
            .headers_mut()
            .insert(header::CONTENT_SECURITY_POLICY, HeaderValue::from_static(POLICY));
    }
    response
}