maverick/flex-template-web
1
0
Fork 0
mirror of https://github.com/kingomarnajjar/flex-template-web.git synced 2026-07-26 06:47:17 +10:00
Code Issues Projects Releases Packages Wiki Activity Actions
4853 commits 6 branches 51 tags 20 MiB
Commit graph

22 commits

Author SHA1 Message Date
Jenni Nurmi
669006015a Add events.mapbox.com to connect-src 2019-07-04 11:16:41 +03:00
Hannu Lyytikainen
7177cb37c7 Pass base url to SDK only if provided 2018-11-28 10:07:03 +02:00
Vesa Luusua
9d4dec2971 CSP: add mapbox api to img-src 2018-09-14 15:15:21 +03:00
Vesa Luusua
efeab41a5b Add mapbox requirements to CSP rules 2018-09-14 15:15:15 +03:00
Hannu Lyytikainen
c50dc86559 Prefer the word customize over customise 2018-05-04 17:36:05 +03:00
Kimmo Puputti
889d33224b CSP: whitelist google maps street view image domains 2018-03-22 11:17:30 +02:00
Kimmo Puputti
84b79f30d7 Add self to the example directive default value 2018-03-20 11:05:23 +02:00
Kimmo Puputti
d7742ac670 Refactor CSP module 2018-03-19 12:48:53 +02:00
Kimmo Puputti
19386f67e8 Remove https prefix from URLs 2018-03-16 15:19:35 +02:00
Kimmo Puputti
71d2c7a17f Allow google.com for analytics assets 2018-03-16 14:35:11 +02:00
Kimmo Puputti
4dccbd51ec Allow eval in scripts 2018-03-16 14:32:51 +02:00
Vesa Luusua
35206f0e0c Fix typo 2018-03-16 13:01:08 +02:00
Vesa Luusua
fb12628115 CSP improvements 2018-03-16 11:59:43 +02:00
Olli Vanhapiha
ee5103dae7
Merge pull request #755 from sharetribe/document-env-vars 
Harmonize env var handling & document them
 2018-03-15 23:25:50 +02:00
Vesa Luusua
44dca2dd80 Add more CSP rules 2018-03-15 14:35:14 +02:00
Olli Vanhapiha
6380d7569f Harmonize client & server env handling 
* Remove defaults from multiple places in code. Put them to .env-template instead
* Do not use imported config.js in server. Access process.env directly instead
* Instruct using .env for local development, not .env.development.local
 2018-03-15 14:27:57 +02:00
Vesa Luusua
1ec0fe4eff Allowed CSP URLs 2018-03-14 17:33:15 +02:00
Kimmo Puputti
f76264de0a Allow data URLs in scripts 2018-02-23 13:08:26 +02:00
Kimmo Puputti
8e0500fe7a Whitelist Stripe API in the CSP 2018-02-09 16:38:35 +02:00
Kimmo Puputti
34b0c18bdd Allow data URL for fonts 2018-02-08 13:40:10 +02:00
Kimmo Puputti
fe73399d4b If enabled, add Sentry API to the CSP whitelist 2018-01-18 14:42:24 +02:00
Kimmo Puputti
4552a9cf29 Add Content Security Policy (CSP) middleware 2018-01-18 14:08:27 +02:00