youngkingdom/dify
1
0
Fork 0
mirror of https://github.com/langgenius/dify.git synced 2026-05-06 10:28:10 +08:00
Code Issues Packages Projects Releases Wiki Activity

try scp

Browse Source
This commit is contained in:
Stephen Zhou
2026-03-17 12:00:57 +08:00
parent 4074cc6c53
commit 62dedba3cc
1 changed files with 19 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
web/app/components/base/modern-monaco/import-map.tsx
View File

@ -1,4 +1,5 @@
import { headers } from 'next/headers' import { headers } from 'next/headers'
import { IS_PROD } from '@/config'
import { env } from '@/env' import { env } from '@/env'
import { MODERN_MONACO_IMPORT_MAP } from './hoisted-config' import { MODERN_MONACO_IMPORT_MAP } from './hoisted-config'
@ -6,6 +7,14 @@ function withBasePath(pathname: string) {
return `${env.NEXT_PUBLIC_BASE_PATH}${pathname}` return `${env.NEXT_PUBLIC_BASE_PATH}${pathname}`
} }
function extractNonceFromCSP(cspHeader: string | null): string | undefined {
if (!cspHeader)
return undefined
const nonceMatch = /'nonce-([^']+)'/.exec(cspHeader)
return nonceMatch ? nonceMatch[1] : undefined
}
function getRequestOrigin(requestHeaders: Headers) { function getRequestOrigin(requestHeaders: Headers) {
const protocol = requestHeaders.get('x-forwarded-proto') ?? 'http' const protocol = requestHeaders.get('x-forwarded-proto') ?? 'http'
const host = requestHeaders.get('x-forwarded-host') ?? requestHeaders.get('host') const host = requestHeaders.get('x-forwarded-host') ?? requestHeaders.get('host')
@ -14,9 +23,18 @@ function getRequestOrigin(requestHeaders: Headers) {
return `${protocol}://${host}` return `${protocol}://${host}`
} }
function getScriptNonce(requestHeaders: Headers) {
if (!IS_PROD)
return undefined
return extractNonceFromCSP(requestHeaders.get('content-security-policy'))
?? requestHeaders.get('x-nonce')
?? undefined
}
const MonacoImportMap = async () => { const MonacoImportMap = async () => {
const requestHeaders = await headers() const requestHeaders = await headers()
const nonce = process.env.NODE_ENV === 'production' ? requestHeaders.get('x-nonce') ?? '' : '' const nonce = getScriptNonce(requestHeaders)
const requestOrigin = getRequestOrigin(requestHeaders) const requestOrigin = getRequestOrigin(requestHeaders)
const importMap = JSON.stringify({ const importMap = JSON.stringify({
imports: Object.fromEntries( imports: Object.fromEntries(