mirror of https://github.com/moparisthebest/mail
35 lines
1.1 KiB
JavaScript
35 lines
1.1 KiB
JavaScript
'use strict';
|
|
|
|
var express = require('express'),
|
|
port, app, dev;
|
|
|
|
port = process.env.PORT || 8585;
|
|
dev = (process.argv[2] === '--dev');
|
|
app = express();
|
|
|
|
// Server setup
|
|
app.configure(function() {
|
|
app.use(express.compress());
|
|
|
|
if (dev) {
|
|
// serve test files in development mode
|
|
console.log(' > Starting in development mode ...');
|
|
app.use(express['static'](__dirname + '/test'));
|
|
|
|
} else {
|
|
// activate content security policy for production
|
|
app.use(function(req, res, next) {
|
|
res.set('Content-Security-Policy', "default-src 'self'; script-src 'self' 'unsafe-eval'; connect-src *; object-src 'none'; style-src 'self' 'unsafe-inline'");
|
|
res.set('X-Content-Security-Policy', "default-src *; script-src 'self' 'unsafe-eval'; options eval-script; object-src 'none'; style-src 'self' 'unsafe-inline'");
|
|
res.set('X-WebKit-CSP', "default-src 'self'; script-src 'self' 'unsafe-eval'; connect-src *; object-src 'none'; style-src 'self' 'unsafe-inline'");
|
|
|
|
return next();
|
|
});
|
|
}
|
|
|
|
app.use(express['static'](__dirname + '/src'));
|
|
});
|
|
|
|
// start server
|
|
app.listen(port);
|
|
console.log(' > listening on http://localhost:' + port); |