Patching DRSA

Patching DRSA

Langkah-langkah yang dilaksanakan untuk patching

1. Backup terlebih dahulu database server sedia ada (10.29.217.31)

mysqldump -u root -p mampu > mampu-20250702.sql

2. Drop table berkaitan frontend

mysql -u root -p

DROP TABLE frontend_content

DROP TABLE frontend_content_assign

DROP TABLE frontend_page

3. Import semula SQL dari server dev (frontend.sql)

mysql -u root -p mampu < frontend.sql

4. Adjust setting NGINX untuk mengeluarkan nonce-requestid header server-app (10.29.217.162)

   4.1 Edit file conf

   vim /etc/nginx/drsa.conf 
   

   4.2 Masukan code add header

   proxy_set_header X-Request-ID $request_id;
   
   add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'nonce-$request_id'; style-src 'self' 'nonce-$request_id';";
   
   
   

   Contoh:

   server {
   listen 80;
   server_name example.com;
   
   location / {
   
       # Add CSP header with nonce
       proxy_set_header X-Request-ID $request_id;
   
       add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'nonce-$request_id'; style-src 'self' 'nonce-$request_id';";
           # Other configurations...
           root /var/www/html;
           index index.html;
       }
   }
   

   4.5 Restart nginx

   sudo service restart nginx
   

5. Panggil nonce dari php

<?php
$nonce = $_SERVER['HTTP_X_REQUEST_ID'];
?>
<script nonce="<?php echo $nonce; ?>">
    console.log('Script with nonce');
</script>