diff --git a/packages/backend/src/server/api/endpoints/antennas/create.ts b/packages/backend/src/server/api/endpoints/antennas/create.ts index a25b32b404..f69501ae20 100644 --- a/packages/backend/src/server/api/endpoints/antennas/create.ts +++ b/packages/backend/src/server/api/endpoints/antennas/create.ts @@ -107,10 +107,9 @@ export default define(meta, paramDef, async (ps, user) => { userId: user.id, }); if (antennas.length > 5 && !user.isAdmin) { - throw new ApiError(meta.errors.tooManyAntennas) + throw new ApiError(meta.errors.tooManyAntennas); } - if (ps.src === "list" && ps.userListId) { userList = await UserLists.findOneBy({ id: ps.userListId, diff --git a/packages/backend/src/server/web/index.ts b/packages/backend/src/server/web/index.ts index 0d4034f55d..c876635a3c 100644 --- a/packages/backend/src/server/web/index.ts +++ b/packages/backend/src/server/web/index.ts @@ -422,6 +422,10 @@ router.get("/notes/:note", async (ctx, next) => { }); ctx.set("Cache-Control", "public, max-age=15"); + ctx.set( + "Content-Security-Policy", + "default-src 'self'; frame-ancestors '*'", + ); return; } diff --git a/rome.json b/rome.json index 09db5f75e2..37d738b553 100644 --- a/rome.json +++ b/rome.json @@ -13,7 +13,7 @@ "packages/*/package-lock.json", "packages/backend/src/server/web/manifest.ts", "packages/backend/built/", - "packages/backend/nsfw-model/", + "*/model.json", "packages/client/src/emojilist.json", "*.md", "**/tsconfig.json",