-
Notifications
You must be signed in to change notification settings - Fork 2
/
app.js
98 lines (84 loc) · 3.31 KB
/
app.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
const express = require("express");
const app = express();
const port = 80;
const ejs = require("ejs");
const createError = require("http-errors");
const path = require("path");
const cookieParser = require("cookie-parser");
const logger = require("morgan");
const session = require("express-session");
const bodyParser = require("body-parser");
const connection = require("./model/db");
const helmet = require("helmet");
const secret = require('./config/info.json');
const http = require('http');
const crypto = require("crypto")
var server = http.createServer(app);
var io = require('socket.io')(server);
/* app.use(helmet.permittedCrossDomainPolicies());
app.use(helmet.referrerPolicy());
app.use(helmet.xssFilter());
app.use(helmet.hsts());
app.use(helmet.ieNoOpen());
app.use(helmet.noSniff());
//app.use(helmet.contentSecurityPolicy());
app.use(helmet.dnsPrefetchControl());
app.use(helmet.expectCt());
app.use(helmet.frameguard());
app.use(helmet.hidePoweredBy());
app.use((req, res, next) => {
res.locals.cspNonce = crypto.randomBytes(16).toString("hex");
res.setHeader("X-XSS-protection", "1; mode=block");
//console.log(res.locals.cspNonce)
next();
});
app.use(helmet.frameguard({ action: 'SAMEORIGIN' }));
const cspOptions = {
directives: {
defaultSrc: ["'self'", "*.googleapis.com", "'unsafe-inline'", "*.fonts.gstatic.com", "*.googletagmanager.com", "*.fontawesome.com", "https://googleads.g.doubleclick.net", "https://pagead2.googlesyndication.com", 'https://tpc.googlesyndication.com/sodar/sodar2.js', ""],
scriptSrc: ["'self'", "'unsafe-eval'", "*.swiper-bundle.min.js", "https://unpkg.com/swiper@6.8.4/swiper-bundle.min.js", "*.fontawesome.com", "https://pagead2.googlesyndication.com", "*.google.com", "partner.googleadservices.com", "https://tpc.googlesyndication.com", "*.googletagmanager.com"],
frameSrc: ["'self'", "https://googleads.g.doubleclick.net", 'https://tpc.googlesyndication.com', "https://*.google.com", "*.googletagmanager.com"],
"img-src": ["'self'", "data:", "https://pagead2.googlesyndication.com", "https://ad.doubleclick.net", "*.googletagmanager.com"],
}
}
app.use(helmet.contentSecurityPolicy(cspOptions)) */
const mainRouter = require("./Router/main");
const searchRouter = require("./Router/search");
const adminRouter = require("./Router/admin/main");
const categoryRouter= require("./Router/category");
const articleRouter = require('./Router/article');
app.set('view engine', 'ejs');
app.set('views', __dirname + '/views');
app.set('socketio', io);
app.use(logger('dev'));
app.use(bodyParser.json());
app.use(bodyParser.urlencoded({ extended: true }));
app.use(cookieParser(secret.secretId));
app.use(express.static(path.join(__dirname, '/public')));
app.disable('etag');
app.use(session({
secret: secret.secretId,
resave: false,
saveUninitialized: true,
cookie: {
maxAge: 1000 * 60 * 10,
secure: false,
httpOnly: true,
signed: true,
authorized: true,
},
//store: new fileStore(),
}))
app.use('/', mainRouter);
app.use("/search", searchRouter);
app.use("/admin", adminRouter);
app.use("/category", categoryRouter);
app.use("/article", articleRouter);
// error handler
app.use(function (err, req, res, next) {
console.log(err.message, err.status)
});
server.listen(port, secret.address, () => {
console.log(`Server running ${port}`);
});
module.exports = app;