forked from wdingx/pan-genome-visualization
-
Notifications
You must be signed in to change notification settings - Fork 14
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
e12bbcb
commit 1ac4763
Showing
6 changed files
with
290 additions
and
3 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,28 @@ | ||
| // Implements rewrite of non-gz to gz URLs using AWS Lambda@Edge. This is | ||
| // useful if you have precompressed your files. | ||
| // | ||
| // Usage: Create an AWS Lambda function and attach it to "Origin Request" event | ||
| // of a Cloudfront distribution | ||
|
|
||
| ARCHIVE_EXTS = [ | ||
| '.7z', | ||
| '.br', | ||
| '.bz2', | ||
| '.gz', | ||
| '.lzma', | ||
| '.xz', | ||
| '.zip', | ||
| '.zst', | ||
| ] | ||
|
|
||
| exports.handler = (event, context, callback) => { | ||
| const request = event.Records[0].cf.request | ||
|
|
||
| // If not an archive file (which are not precompressed), rewrite the URL to | ||
| // get the corresponding .gz file | ||
| if(!ARCHIVE_EXTS.every(ext => request.uri.endsWith(ext))) { | ||
| request.uri += '.gz' | ||
| } | ||
|
|
||
| callback(null, request) | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,68 @@ | ||
| /* eslint-disable prefer-destructuring */ | ||
| // Adds additional headers to the response, including security headers and CORS. | ||
| // Suited for serving files and APIs. | ||
| // | ||
| // See also: | ||
| // - https://securityheaders.com/ | ||
| // | ||
| // Usage: Create an AWS Lambda@Edge function and attach it to "Viewer Response" | ||
| // event of a Cloudfront distribution | ||
|
|
||
|
|
||
| const NEW_HEADERS = { | ||
| 'Access-Control-Allow-Origin': '*', | ||
| 'Access-Control-Allow-Methods': 'GET, OPTIONS', | ||
| 'Content-Security-Policy': `default-src 'none'; frame-ancestors 'none'`, | ||
| 'Strict-Transport-Security': 'max-age=15768000; includeSubDomains; preload', | ||
| 'X-Content-Type-Options': 'nosniff', | ||
| 'X-DNS-Prefetch-Control': 'off', | ||
| 'X-Download-Options': 'noopen', | ||
| 'X-Frame-Options': 'DENY', | ||
| 'X-XSS-Protection': '1; mode=block', | ||
| } | ||
|
|
||
| function addHeaders(headersObject) { | ||
| return Object.fromEntries( | ||
| Object.entries(headersObject).map(([header, value]) => [header.toLowerCase(), [{ | ||
| key: header, | ||
| value | ||
| }]]), | ||
| ) | ||
| } | ||
|
|
||
| const HEADERS_TO_REMOVE = new Set(['server', 'via']) | ||
|
|
||
| function filterHeaders(headers) { | ||
| return Object.entries(headers).reduce((result, [key, value]) => { | ||
| if(HEADERS_TO_REMOVE.has(key.toLowerCase())) { | ||
| return result | ||
| } | ||
|
|
||
| if(key.toLowerCase().includes('powered-by')) { | ||
| return result | ||
| } | ||
|
|
||
| return { ...result, [key.toLowerCase()]: value } | ||
| }, {}) | ||
| } | ||
|
|
||
| function modifyHeaders({ request, response }) { | ||
| let newHeaders = addHeaders(NEW_HEADERS) | ||
|
|
||
| newHeaders = { | ||
| ...response.headers, | ||
| ...newHeaders, | ||
| } | ||
|
|
||
| newHeaders = filterHeaders(newHeaders) | ||
|
|
||
| return newHeaders | ||
| } | ||
|
|
||
| exports.handler = (event, context, callback) => { | ||
| const { request, response } = event.Records[0].cf | ||
| response.headers = modifyHeaders({ request, response }) | ||
| callback(null, response) | ||
| } | ||
|
|
||
| exports.modifyHeaders = modifyHeaders |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,9 @@ | ||
| [ | ||
| { | ||
| "AllowedHeaders": ["*"], | ||
| "AllowedMethods": ["GET", "HEAD"], | ||
| "AllowedOrigins": ["*"], | ||
| "ExposeHeaders": [], | ||
| "MaxAgeSeconds": 3000 | ||
| } | ||
| ] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,28 @@ | ||
| // Implements rewrite of non-gz to gz URLs using AWS Lambda@Edge. This is | ||
| // useful if you have precompressed your files. | ||
| // | ||
| // Usage: Create an AWS Lambda function and attach it to "Origin Request" event | ||
| // of a Cloudfront distribution | ||
|
|
||
| ARCHIVE_EXTS = [ | ||
| '.7z', | ||
| '.br', | ||
| '.bz2', | ||
| '.gz', | ||
| '.lzma', | ||
| '.xz', | ||
| '.zip', | ||
| '.zst', | ||
| ] | ||
|
|
||
| exports.handler = (event, context, callback) => { | ||
| const request = event.Records[0].cf.request | ||
|
|
||
| // If not an archive file (which are not precompressed), rewrite the URL to | ||
| // get the corresponding .gz file | ||
| if(!ARCHIVE_EXTS.every(ext => request.uri.endsWith(ext))) { | ||
| request.uri += '.gz' | ||
| } | ||
|
|
||
| callback(null, request) | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,144 @@ | ||
| /* eslint-disable prefer-destructuring */ | ||
| // Adds additional headers to the response, including security headers. | ||
| // Suited for websites. | ||
| // | ||
| // See also: | ||
| // - https://securityheaders.com/ | ||
| // | ||
| // Usage: Create an AWS Lambda@Edge function and attach it to "Viewer Response" | ||
| // event of a Cloudfront distribution | ||
|
|
||
| const FEATURE_POLICY = { | ||
| 'accelerometer': `'none'`, | ||
| 'autoplay': `'none'`, | ||
| 'camera': `'none'`, | ||
| 'document-domain': `'none'`, | ||
| 'encrypted-media': `'none'`, | ||
| 'fullscreen': `'none'`, | ||
| 'geolocation': `'none'`, | ||
| 'gyroscope': `'none'`, | ||
| 'magnetometer': `'none'`, | ||
| 'microphone': `'none'`, | ||
| 'midi': `'none'`, | ||
| 'payment': `'none'`, | ||
| 'picture-in-picture': `'none'`, | ||
| 'sync-xhr': `'none'`, | ||
| 'usb': `'none'`, | ||
| 'xr-spatial-tracking': `'none'`, | ||
| } | ||
|
|
||
| function generateFeaturePolicyHeader(featurePolicyObject) { | ||
| return Object.entries(featurePolicyObject) | ||
| .map(([policy, value]) => `${policy} ${value}`) | ||
| .join('; ') | ||
| } | ||
|
|
||
| const PERMISSIONS_POLICY = { | ||
| 'accelerometer': '()', | ||
| 'ambient-light-sensor': '()', | ||
| 'autoplay': '()', | ||
| 'battery': '()', | ||
| 'camera': '()', | ||
| 'clipboard-read': '()', | ||
| 'clipboard-write': '()', | ||
| 'conversion-measurement': '()', | ||
| 'cross-origin-isolated': '()', | ||
| 'display-capture': '()', | ||
| 'document-domain': '()', | ||
| 'encrypted-media': '()', | ||
| 'execution-while-not-rendered': '()', | ||
| 'execution-while-out-of-viewport': '()', | ||
| 'focus-without-user-activation': '()', | ||
| 'fullscreen': '()', | ||
| 'gamepad': '()', | ||
| 'geolocation': '()', | ||
| 'gyroscope': '()', | ||
| 'hid': '()', | ||
| 'idle-detection': '()', | ||
| 'interest-cohort': '()', | ||
| 'keyboard-map': '()', | ||
| 'magnetometer': '()', | ||
| 'microphone': '()', | ||
| 'midi': '()', | ||
| 'navigation-override': '()', | ||
| 'payment': '()', | ||
| 'picture-in-picture': '()', | ||
| 'publickey-credentials-get': '()', | ||
| 'screen-wake-lock': '()', | ||
| 'serial': '()', | ||
| 'speaker-selection': '()', | ||
| 'sync-script': '()', | ||
| 'sync-xhr': '()', | ||
| 'trust-token-redemption': '()', | ||
| 'usb': '()', | ||
| 'vertical-scroll': '()', | ||
| 'web-share': '()', | ||
| 'window-placement': '()', | ||
| 'xr-spatial-tracking': '()', | ||
| } | ||
|
|
||
| function generatePermissionsPolicyHeader(permissionsPolicyObject) { | ||
| return Object.entries(permissionsPolicyObject) | ||
| .map(([policy, value]) => `${policy}=${value}`) | ||
| .join(', ') | ||
| } | ||
|
|
||
| const NEW_HEADERS = { | ||
| 'Content-Security-Policy': | ||
| `default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: ; connect-src *`, | ||
| 'Referrer-Policy': 'no-referrer', | ||
| 'Strict-Transport-Security': 'max-age=15768000; includeSubDomains; preload', | ||
| 'X-Content-Type-Options': 'nosniff', | ||
| 'X-DNS-Prefetch-Control': 'off', | ||
| 'X-Download-Options': 'noopen', | ||
| 'X-Frame-Options': 'SAMEORIGIN', | ||
| 'X-XSS-Protection': '1; mode=block', | ||
| 'Feature-Policy': generateFeaturePolicyHeader(FEATURE_POLICY), | ||
| 'Permissions-Policy': generatePermissionsPolicyHeader(PERMISSIONS_POLICY), | ||
| } | ||
|
|
||
| function addHeaders(headersObject) { | ||
| return Object.fromEntries( | ||
| Object.entries(headersObject).map(([header, value]) => [header.toLowerCase(), [{ | ||
| key: header, | ||
| value | ||
| }]]), | ||
| ) | ||
| } | ||
|
|
||
| const HEADERS_TO_REMOVE = new Set(['server', 'via']) | ||
|
|
||
| function filterHeaders(headers) { | ||
| return Object.entries(headers).reduce((result, [key, value]) => { | ||
| if(HEADERS_TO_REMOVE.has(key.toLowerCase())) { | ||
| return result | ||
| } | ||
|
|
||
| if(key.toLowerCase().includes('powered-by')) { | ||
| return result | ||
| } | ||
|
|
||
| return { ...result, [key.toLowerCase()]: value } | ||
| }, {}) | ||
| } | ||
|
|
||
| function modifyHeaders({ request, response }) { | ||
| let newHeaders = addHeaders(NEW_HEADERS) | ||
|
|
||
| newHeaders = { | ||
| ...response.headers, | ||
| ...newHeaders, | ||
| } | ||
|
|
||
| newHeaders = filterHeaders(newHeaders) | ||
|
|
||
| return newHeaders | ||
| } | ||
|
|
||
| exports.handler = (event, context, callback) => { | ||
| const { request, response } = event.Records[0].cf | ||
| response.headers = modifyHeaders({ request, response }) | ||
| callback(null, response) | ||
| } | ||
|
|
||
| exports.modifyHeaders = modifyHeaders |