bump version to 1.4.0;added csp;

defaults/main.yml

@@ -1,7 +1,7 @@
 ---
 
 #PRIVATE BIN VARIABLES
-privatebin_version: '1.3.5'
+privatebin_version: '1.4.0'
 privatebin_app_dir: '/var/www/privatebin'
 privatebin_user: 'www-data'
 privatebin_group: 'www-data'
@@ -27,6 +27,7 @@ privatebin_notice: ""
 privatebin_language_selection: 'true'
 privatebin_ip_icon: 'none'
 privatebin_compression: 'zlib'
+privatebin_csp: 'true'
 #[expire]
 privatebin_expire_default: '1week'
 privatebin_purge_limit: '300'

templates/cfg/conf.php.j2

@@ -86,7 +86,9 @@ icon = {{ privatebin_ip_icon }}
 ;   async functions and display an error if not and for Chrome to enable
 ;   webassembly support (used for zlib compression). You can remove it if Chrome
 ;   doesn't need to be supported and old browsers don't need to be warned.
-; cspheader = "default-src 'none'; manifest-src 'self'; connect-src * blob:; script-src 'self' 'unsafe-eval' resource:; style-src 'self'; font-src 'self'; img-src 'self' data: blob:; media-src blob:; object-src blob:; sandbox allow-same-origin allow-scripts allow-forms allow-popups allow-modals allow-downloads"
+{% if privatebin_csp is defined and privatebin_csp == 'true' %} 
+cspheader = "default-src 'none'; base-uri 'self'; form-action 'none'; manifest-src 'self'; connect-src * blob:; script-src 'self' 'unsafe-eval'; style-src 'self'; font-src 'self'; frame-ancestors 'none'; img-src 'self' data: blob:; media-src blob:; object-src blob:; sandbox allow-same-origin allow-scripts allow-forms allow-popups allow-modals allow-downloads"
+{% endif %}
 
 ; stay compatible with PrivateBin Alpha 0.19, less secure
 ; if enabled will use base64.js version 1.7 instead of 2.1.9 and sha1 instead of
@@ -155,6 +157,13 @@ batchsize = {{ privatebin_purge_batchsize }}
 ; directory to store the purge limit in
 dir = PATH "{{ privatebin_data_dir }}"
 
+;[model]
+; example of a Google Cloud Storage configuration
+;class = GoogleCloudStorage
+;[model_options]
+;bucket = "my-private-bin"
+;prefix = "pastes"
+
 [model]
 ; name of data model class to load and directory for storage
 ; the default model "Filesystem" stores everything in the filesystem