Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore: LEAP-176: set up CSP in Label Studio #5137

Merged
merged 10 commits into from
Dec 7, 2023
Merged

chore: LEAP-176: set up CSP in Label Studio #5137

Changes from 1 commit
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
3003c9a
fix: LEAP-176: set up basic CSP config, sandbox for upload API, repor…
jombooth Nov 20, 2023
709ff05
fix user login CSS
jombooth Nov 21, 2023
1b18b87
Merge branch 'develop' into fb-LEAP-176/csp-2
jombooth Nov 28, 2023
afb7e71
csp checkpoint
jombooth Nov 29, 2023
cae8b5c
Merge branch 'develop' into fb-LEAP-176/csp-2
jombooth Dec 4, 2023
6cc2534
fuller CSP implementation for LS
jombooth Dec 4, 2023
92fa7cf
remove earlier header setup
jombooth Dec 4, 2023
f5f8f58
suppress codespell complaint
jombooth Dec 4, 2023
f9d0609
ENABLE_LS_CSP -> ENABLE_CSP
jombooth Dec 6, 2023
ee9c570
merge develop
jombooth Dec 7, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
remove earlier header setup
  • Loading branch information
@jombooth
jombooth committed Dec 4, 2023
commit 92fa7cff25f25ccae7d920935c3ac2d8dbc38f66
7 changes: 2 additions & 5 deletions label_studio/data_import/api.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -616,12 +616,9 @@ def get(self, *args, **kwargs):
if file.storage.exists(file.name):
content_type, encoding = mimetypes.guess_type(str(file.name))
content_type = content_type or 'application/octet-stream'
resp = RangedFileResponse(request, file.open(mode='rb'), content_type=content_type)
else:
resp = Response(status=status.HTTP_404_NOT_FOUND)
return RangedFileResponse(request, file.open(mode='rb'), content_type=content_type)

resp['override-report-only-csp'] = True
return resp
return Response(status=status.HTTP_404_NOT_FOUND)


class DownloadStorageData(APIView):
Expand Down
Loading