From 2ee35e1178c07507c1ca49b1a2db4f5c17755b58 Mon Sep 17 00:00:00 2001
From: clabroche <corentinlabroche@gmail.com>
Date: Wed, 14 Feb 2024 12:08:52 +0100
Subject: [PATCH] fix(front): fix cors policy

---
 fronts/app/src/assets/vscode-icon.png | Bin 0 -> 5345 bytes
 fronts/app/src/views/StackSingle.vue  |   2 +-
 servers/server/.gitignore             |   3 ++-
 servers/server/bin/server.js          |  10 ++++++++++
 servers/server/models/Service.js      |   2 +-
 5 files changed, 14 insertions(+), 3 deletions(-)
 create mode 100644 fronts/app/src/assets/vscode-icon.png

diff --git a/fronts/app/src/assets/vscode-icon.png b/fronts/app/src/assets/vscode-icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..d24896712071718d03fd6f84fd29205b856233fe
GIT binary patch
literal 5345
zcmeHKc~n!!8oz)dvK17UD#Z|Zv}&^_WP!*QmS7ViBB+RRb8`a`vXERLXjxQ5ZLNZ$
zg1bD>CtE8m7PMdx6!#UiXc0tewW3%kjdi1Q10tT+bKdcs*Z<7T-1+Xz@B7WnZ@&4G
zyG|kwwzHmM4MC8dFhmdzY8Sj%S%SM4wXz6Qm(ck_xllL*vH}kPX*LQn!!e+kjj+wl
zEFcTemIKN-VB;9POfeg6s@DU1>X4le>`#U;=D?<znL~D<-U$jF*iN7>1x2xDaIAV@
z;~y*26#^`r`E?yE6iEnlGL1@RcmjVaoynupc{C=0M&q&QJQf?E&Gx>T5zgd1RZ{_2
zvK0XV5@A39L8Dd66^SSW>362*@k1JYolh*8TM}MsKhZJilw?<TQJ{0egfAqnE!Gvh
zf<@0pi>7RHniSkn-O<r3z1DDILDZNiKZh4kQi>)V%NsYa&1qrNGR;pLQ;jaEJ<z^6
z@b+ut$1vMGub$2>IA8I_iYTkez790ov*+md+^4Uuy!+5)R{ib3v`C{ab3+D8O*4Ev
zuDKAt*)+9@vEy(<+8)li(5leS#omf5qt{KVt<=9bS$n_Az-W|v@WY%vCVu%*IYymX
zI3;O4r)VkfXPX5Z=Us^2SsnUS_2bh^CZBmY^X#Gn+#L6bhenMhI<-iGMtc^0_iOR|
zkgFL*UuL%S&+ZC8HP6zm*}U`;;b_JapQmjV^9pwNZt@?y*LWgn*2xtH@}+XG3&ult
znPJcXLsRno%WIa@=fY)m6@eSF8k8NKM=GW-H~ef*?UkL{-yNE<-G3kS!=B6RpR@Kw
z6Kd}DU%%P>z#?~FWjNc=;7XlS+}%&^dHk^ZQ9GmJRR*+8r>(A9TF3`6s8>YH$L5PZ
z;~{D#8J4M~C|R%6;2Q>c`{*?=l7M0aDH^9x@rgZ0j}Zw98J`%%5>Z8(05o0^vP_H4
zT_%n|mL(uu8PR8!wYQ!J2$U!W6ZFbNm5!(96HUB4VB^gcBEbZ~68OaVAdUjmT9m*f
zGs#p^pk9$eC(g1acxz>HUbrA=hypzEiSZbw;ZZ25sj1{t23f6*qtLiqE`>^`(CH+A
zAnDRn7_29$bZ$7sAcp|eAzFn7Q>ax0oD-I+lQBM#2>J=H=cm+&M8otd-H-}E4~ibv
zP-tW-MX98W^w42}DS%{XLVxR_i%8R;lyFq1PSzr5U<#_j+(uH!kYRsKvNqAQ92r7E
z6Hz6A>cFV9w}!+|+^`2OL7YOVF?j*8-$G&v`5Up`nj79@TF%Ic0QX_ux6rTGZUO_8
zNW>GUkz{;&LIIzMkI$2-5rvFrGUap{ox@;BNm3e(Nn$c#E=kIja!D+hBjs>BVHlxu
zMo<Y=It*4JC{6{)$qK+DMG-lZibzRJHk(UgB2<LLku#_ygzhPWSt!hA%NZjm!n6ty
zm2l$7S>aSNK!wnx2#qddkhoM&I*BP|vq>;h#v;k6GFUFBp$tz%W}=cIydbq!34`ra
zDB(DiqEW?}I&i^xei9*{NGDU@v`7+ROb#6Q#LpC}Wc{0t2!#@zi@~^>G&YsZ1z&Ju
zaJUTm8&D*w)qzOFIZe6K)Prve4=e@<3*&JL2u$r@ExZ6N3S(+*gj$`*Ck|)b;cgK)
zPBIvS1u%vJ(&0QD@j4IBq|$iQ!Rh04BDG8*Py1hJ{O}OG0Um65h(ZU(Pct<Qo~XHK
z(%{qJW1_-zln4aVq2R&D;1YCj3OcAT;2P{g;$c-B3bMygxV~;z{7oou7;-raW>HC~
z3~VA3mCH#mm&GBmxN=W6o5ez8w82mqX4k3ZSSqYV{o;U*Kr0ZQre7$+C#H>>ZqjTR
zof?ngy8r|uQRyTa^R-~yA;Bm^3#Q;X<MoQYDgUL3w+S#J$pF8>HjunPE~E@6!y(PU
z4F1W_&|dtLLl6k>2YDxb-^=x0u6I)4oxty->%Cm>q`*6Y-$&Q~O)l#<uT!WB{0mA2
zFH0!Tz8bt}SxRRI3!nk~+FN&EGiVvB30a_nAe-@cF@v`6oD3SrU_w#gnEU4T)=aOm
zrE5Qgpivn@fnP*ObH%pI_<88$=3_lvWA~AmYNe6KZrw@@s=aoFWOv>_H+Q`xbjs@R
z+&PYdSHA9OD))3AH)@<?lht&GQnYB%uJEpMAMI4tD`Y_xcJAJlmzrC3#+}AL|7gy@
zfHAdvdB@p0<4?b&&+6%`zu5Oma_UK+ApPvpJw8X1QhqC{sd_QZ?gP8@)~bUo;=^+b
zvnxw|jyiTYa*_thi~h87%3pb0wXY?(IcSGCa#A3}esS$UcY=gtdnJ2(bNTV*js?-Y
zexK8e9bMK21^avzF{$me)zizy3oVe<MlZLHAE$R@+y9<Wv84ayw2t1Fai3ZHICXxN
z$+sZ5x-;7r9(1tn+pJhs_N(}Lb>l@dZy)h&!sguHKDe<)GWx1HrFHqT{SN1$8#T47
z*RMJ;-u5ZfvG3#sZ?s^I@9#@LcB%g^S=eH;aL)45tgf-<^BynevRXRttQxhxH|K)X
z;2kVwtk`wty9?Xc7#T}=63e0QF>qZ=J=}UPO_PfsvmYed&Tu38wszV0lUCCypQ`TP
z%(Wtwt;-)DKcRP4;rdfC?L0vVi(%{(JUM9IF?C=Q{lnU<XU|rwim|(SD7DZcll<@d
zcO!yS+YfHE_>tut&{+K}j?+`-8Wv#wL~%J`3q8yaPC8S%za<iV7HN}qtO{wRk_^-~
z=NOAQ>9vm!?(t}UfVBz@H9u5z9+_AdYLj{0-+lJptsxq}!=7=zw`lRr;wnFZ%{C8z
zv#d^%Yb<0?-<qjfcc10ITO+b8$o*klh}c2eOb|O0JFO0R-Qzs0?2f*%$2q_Fas=1R
z(BtLe5+iA^H_Pc^_$sv@75Q3yqs_W?L+#s1S(HA|+EW*FwJayk))G3<GsE`Ky4Kac
zg!Z~ETkM=ZH4nT}+4sO;Xp&g?{&wLmms%mGRe7H6usbDLa)d`Jri&-^9III_KF@8m
z*?D+_S?ui%J-yQt9i_V_do-O}X=@Bn8H>xJrmd)p{G)t);PadQE;a>a*;#XH9?d^w
zmFaZH+R<M|EVQ+u^Q>yGU3G0Lh`K1O-kS4u`s4Zy6H-5(R2O*Mfld?@dT6%g3u&KE
zyPp?*Hn2-ba=v6<BOLXw>}Rkzrund8tH)^fKSMV`PsaKcS1z&$y;D*jaPgxZPuqA0
zDqkiYUkerdl1G`i*Iu?Q()(V!?iKnfN}IQ6W>-meZGzi^w7!mK$hsVMD&-LoEpa%u
zU*sIi&tLlG2HU9OZ|6d}#z>t@gC$g#W&HtDwKlDv`Ssz7tTUXkd#`*O`skD1zExJE
zZ1`@wuNOYt{e;3ecuwwHk<^y>h}JbGK+$j#GpxE3{8-`@W|P)Z*8<&ny89Q8Lh@uN
zr#)ukX8rGhu0G;jjbm%{>oU<Uy%!P|ZMVfbOgTHnsUg;3g(NT9{)MRG`^kk+urcy_
zcvrG(b#88U<L&(Hx}yG+<%!s<Em8jGKdd|c^mgqxc`d=Q!7uko8U#(<mL-dWgLfQh
z|Mc{W3Gx}ysfR27h>k?Q`H#D5;es{0@){`1ZZ9s-DxQy-vwG#!t6S6efaC-T1I2<$
I|Jap(0i#F7n*aa+

literal 0
HcmV?d00001

diff --git a/fronts/app/src/views/StackSingle.vue b/fronts/app/src/views/StackSingle.vue
index 1b3a20c2..c55fe0de 100644
--- a/fronts/app/src/views/StackSingle.vue
+++ b/fronts/app/src/views/StackSingle.vue
@@ -12,7 +12,7 @@
             <a v-if="currentService.git && currentService.git.home" :href="currentService.git.home" target="_blank" title="Open git home"><i class="fab fa-github"  aria-hidden="true"></i></a>
             <a v-if="currentService.url" :href="currentService.url" target="_blank" title="Open service URL"><i class="fas fa-globe"  aria-hidden="true"></i></a>
             <a v-for="url in currentService.urls" :key="url" :href="url" target="_blank" :title="url"><i class="fas fa-globe"  aria-hidden="true"></i></a>
-            <img v-if="currentService.rootPath" src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/9a/Visual_Studio_Code_1.35_icon.svg/240px-Visual_Studio_Code_1.35_icon.svg.png" alt="vscode icon"  aria-hidden="true" title="Open in Visual Studio Code" @click="openInVsCode()"/>
+            <img v-if="currentService.rootPath" src="@/assets/vscode-icon.png" alt="vscode icon"  aria-hidden="true" title="Open in Visual Studio Code" @click="openInVsCode()"/>
             <i v-if="currentService.rootPath" class="fas fa-folder" aria-hidden="true" title="Open folder" @click="openFolder()"></i>
           </div>
         </div>
diff --git a/servers/server/.gitignore b/servers/server/.gitignore
index 072ff889..7eef49ac 100644
--- a/servers/server/.gitignore
+++ b/servers/server/.gitignore
@@ -59,4 +59,5 @@ typings/
 
 # next.js build output
 .next
-dist
\ No newline at end of file
+dist
+bin/public
\ No newline at end of file
diff --git a/servers/server/bin/server.js b/servers/server/bin/server.js
index f429fe1b..4060d081 100644
--- a/servers/server/bin/server.js
+++ b/servers/server/bin/server.js
@@ -14,6 +14,16 @@ const args = require('../helpers/args');
     bodyLimit: '100mb',
     noGreetings: true,
     staticController: pathfs.resolve(__dirname, 'public'),
+    helmetConf: {
+      crossOriginEmbedderPolicy: false,
+      crossOriginResourcePolicy: false,
+      contentSecurityPolicy: {
+        directives: {
+          'frame-src': ["'self'", 'clabroche.github.io'],
+        },
+        useDefaults: true,
+      },
+    },
     onListening(server) {
       const addr = server.address();
       const port = typeof addr === 'string'
diff --git a/servers/server/models/Service.js b/servers/server/models/Service.js
index 0203300b..d28529a3 100644
--- a/servers/server/models/Service.js
+++ b/servers/server/models/Service.js
@@ -380,7 +380,7 @@ class Service {
     }
     let healthy;
     try { healthy = await this.health.check(this); } catch (error) {
-      console.error(`Service health failed:${error}`);
+      console.error(`Service health failed(${this.label}):${error}`);
     }
     if (!healthy && !this.crashed) {
       this.crashed = true;