40 lines
1.5 KiB
TOML
40 lines
1.5 KiB
TOML
# Netlify Config
|
|
#
|
|
# TOML Reference:
|
|
# https://www.netlify.com/docs/netlify-toml-reference/
|
|
#
|
|
# We use Netlify for deploy previews and for publishing docs (gh-pages branch).
|
|
# https://viewer.ohif.org is created using a different process that is
|
|
# managed by CircleCI and deployed to our Google Hosting
|
|
|
|
[build]
|
|
base = ""
|
|
command = "pnpm run build:ci"
|
|
publish = "platform/app/dist"
|
|
|
|
[build.environment]
|
|
# If 'production', `pnpm install` does not install devDependencies
|
|
NODE_ENV = "development"
|
|
NODE_VERSION = "24.15.0"
|
|
|
|
[[headers]]
|
|
for = "/*"
|
|
|
|
[headers.values]
|
|
X-Frame-Options = "DENY"
|
|
X-XSS-Protection = "1; mode=block"
|
|
|
|
# Report-Only CSP: observational only, enforces nothing. Watch browser
|
|
# consoles for violation reports before ever promoting this to an
|
|
# enforcing Content-Security-Policy header. cdnjs.cloudflare.com is for
|
|
# the Rollbar snippet in html-templates/rollbar.html (demo builds);
|
|
# connect-src stays broad because deployments point the viewer at
|
|
# arbitrary DICOMweb origins.
|
|
Content-Security-Policy-Report-Only = "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self' https: blob:; worker-src 'self' blob:; object-src 'self' blob:; frame-src 'self' blob:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'"
|
|
|
|
cache-control = '''
|
|
max-age=0,
|
|
no-cache,
|
|
no-store,
|
|
must-revalidate'''
|