Skip to content

Commit

Permalink
📝 docs: CSP requirements to use built-in syntax highlighting
Browse files Browse the repository at this point in the history
Resolves #320.
  • Loading branch information
welpo committed May 30, 2024
1 parent 22925ca commit 9f1fbc5
Show file tree
Hide file tree
Showing 6 changed files with 31 additions and 7 deletions.
2 changes: 2 additions & 0 deletions config.toml
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,7 @@ index_format = "elasticlunr_json"

[markdown]
highlight_code = true
# To use a Zola built-in theme, CSP needs to allow unsafe-inline for style-src.
highlight_theme = "css"
smart_punctuation = true

Expand Down Expand Up @@ -266,6 +267,7 @@ footer_menu = [
# Default directive is self.
# Default config, allows for https remote images and embedding YouTube and Vimeo content.
# This configuration (along with the right webserver settings) gets an A+ in Mozilla's Observatory: https://observatory.mozilla.org
# Note: to use a Zola built-in syntax highlighting theme, allow unsafe-inline for style-src.
allowed_domains = [
{ directive = "font-src", domains = ["'self'", "data:"] },
{ directive = "img-src", domains = ["'self'", "https://*", "data:"] },
Expand Down
11 changes: 9 additions & 2 deletions content/blog/security/index.ca.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
+++
title = "Seguretat per defecte"
date = 2023-02-22
updated = 2024-03-15
updated = 2024-05-30
description = "tabi té una Política de Seguretat de Contingut (CSP) fàcilment personalitzable amb valors segurs per defecte. Obtingues tranquil·litat i un A+ en l'Observatori de Mozilla."

[taxonomies]
Expand Down Expand Up @@ -32,6 +32,13 @@ Aquesta funcionalitat permet personalitzar fàcilment les capçaleres de seguret

Pots desactivar les capçaleres (permitint-ho tot) en una pàgina, secció, o globalment configurant `enable_csp = false` en el front matter o en el fitxer `config.toml`.

**Nota**: [habilitar els comentaris](@/blog/comments/index.ca.md) o [les analítiques](@/blog/mastering-tabi-settings/index.ca.md#analisi-web) automàticament permet scripts/frames/estils/connexions en funció del servei habilitat.
**Notas**:

- [Habilitar els comentaris](@/blog/comments/index.ca.md) o [les analítiques](@/blog/mastering-tabi-settings/index.ca.md#analisi-web) automàticament permet scripts/frames/estils/connexions en funció del servei habilitat.
- Per utilitzar un [tema de resaltat de sintaxis integrat a Zola](https://www.getzola.org/documentation/getting-started/configuration/#syntax-highlighting), has de permetre `unsafe-inline` a la directiva `style-src`:

```
{ directive = "style-src", domains = ["'self'", "'unsafe-inline'"] },
```
[^1]: Requereix una configuració adequada del servidor web (p. ex., redirigir el trànsit HTTP a HTTPS).
11 changes: 9 additions & 2 deletions content/blog/security/index.es.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
+++
title = "Seguro por defecto"
date = 2023-02-22
updated = 2024-03-15
updated = 2024-05-30
description = "tabi tiene una Política de Seguridad de Contenido (CSP) fácilmente personalizable con configuraciones seguras. Obtén tranquilidad y una calificación de A+ en Mozilla Observatory."

[taxonomies]
Expand Down Expand Up @@ -32,6 +32,13 @@ Esta función permite personalizar fácilmente las cabeceras de seguridad del si

Puedes desactivar las cabeceras (permitiendo todo) en una página, sección, o globalmente configurando `enable_csp = false` en el front matter o en el archivo `config.toml`.

**Nota**: [habilitar los comentarios](@/blog/comments/index.es.md) o [las analíticas](@/blog/mastering-tabi-settings/index.es.md#analisis-web) automáticamente permite scripts/frames/estilos/conexiones en función del servicio habilitado.
**Notas**:

- [Habilitar los comentarios](@/blog/comments/index.es.md) o [las analíticas](@/blog/mastering-tabi-settings/index.es.md#analisis-web) automáticamente permite scripts/frames/estilos/conexiones en función del servicio habilitado.
- Para usar un [tema de resaltado de sintaxis integrado en Zola](https://www.getzola.org/documentation/getting-started/configuration/#syntax-highlighting), has de permitir `unsafe-inline` en la directiva `style-src`:

```
{ directive = "style-src", domains = ["'self'", "'unsafe-inline'"] },
```
[^1]: Requiere una configuración adecuada del servidor web (por ejemplo, redirigir el tráfico HTTP a HTTPS).
11 changes: 9 additions & 2 deletions content/blog/security/index.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
+++
title = "Secure by default"
date = 2023-02-22
updated = 2024-03-15
updated = 2024-05-30
description = "tabi has an easily customizable Content Security Policy (CSP) with safe defaults. Get peace of mind and an A+ on Mozilla Observatory."

[taxonomies]
Expand Down Expand Up @@ -32,6 +32,13 @@ This feature allows you to easily customize the website's security headers to al

You can disable the CSP (allowing all connections) on a page, section, or globally by setting `enable_csp = false` in the front matter or `config.toml` file.

**Note**: [enabling comments](@/blog/comments/index.md) or [analytics](@/blog/mastering-tabi-settings/index.md#analytics) automatically allows scripts/frames/styles/connections as needed from the respective services.
**Notes**:

- [Enabling comments](@/blog/comments/index.md) or [analytics](@/blog/mastering-tabi-settings/index.md#analytics) automatically allows scripts/frames/styles/connections as needed from the respective services.
- To use a [Zola built-in syntax highlighting theme](https://www.getzola.org/documentation/getting-started/configuration/#syntax-highlighting), you need to allow `unsafe-inline` in the `style-src` directive:

```
{ directive = "style-src", domains = ["'self'", "'unsafe-inline'"] },
```
[^1]: Requires proper webserver configuration (e.g. redirecting HTTP traffic to HTTPS).
2 changes: 1 addition & 1 deletion static/custom_subset.css
Original file line number Diff line number Diff line change
@@ -1 +1 @@
@font-face{font-family:"Inter Subset";src:url(data:application/font-woff2;base64,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);}
@font-face{font-family:"Inter Subset";src:url(data:application/font-woff2;base64,);}
1 change: 1 addition & 0 deletions theme.toml
Original file line number Diff line number Diff line change
Expand Up @@ -221,6 +221,7 @@ encode_plaintext_email = true # Setting is ignored if email is already encoded.
# Default directive is self.
# Default config, allows for https remote images and embedding YouTube and Vimeo content.
# This configuration (along with the right webserver settings) gets an A+ in Mozilla's Observatory: https://observatory.mozilla.org
# Note: to use a Zola built-in syntax highlighting theme, allow unsafe-inline for style-src.
allowed_domains = [
{ directive = "font-src", domains = ["'self'", "data:"] },
{ directive = "img-src", domains = ["'self'", "https://*", "data:"] },
Expand Down

0 comments on commit 9f1fbc5

Please sign in to comment.