Commit graph

108 commits

Author SHA1 Message Date
Jenni Nurmi
669006015a Add events.mapbox.com to connect-src 2019-07-04 11:16:41 +03:00
Vesa Luusua
7161853006 CRA v3.0.0 had custom asset-manifest generator for files 2019-05-08 12:25:23 +03:00
Jenni Nurmi
d8bf1c926c Update Sentry DSN related env variables and docs 2019-01-17 10:29:39 +02:00
Jenni Nurmi
21029f549e Use new Sentry SDKs insted of Raven 2019-01-17 10:29:33 +02:00
Hannu Lyytikainen
7177cb37c7 Pass base url to SDK only if provided 2018-11-28 10:07:03 +02:00
Vesa Luusua
9d4dec2971 CSP: add mapbox api to img-src 2018-09-14 15:15:21 +03:00
Vesa Luusua
efeab41a5b Add mapbox requirements to CSP rules 2018-09-14 15:15:15 +03:00
Kimmo Puputti
360a5a9a78 Update the Sharetribe Flex SDK to the 1.0.0 version in NPM 2018-08-07 13:08:35 +03:00
Hannu Lyytikäinen
42000675aa
Merge pull request #820 from sharetribe/app-rename
Remove occurrences of 'Starter App'
2018-05-08 13:13:20 +03:00
Hannu Lyytikainen
c50dc86559 Prefer the word customize over customise 2018-05-04 17:36:05 +03:00
Hannu Lyytikainen
89883b8e8a Remove occurrences of 'Starter App' 2018-05-04 17:04:41 +03:00
Mikko Koski
759844112a Use Transit Verbose mode in development 2018-04-12 16:28:16 +03:00
Vesa Luusua
59f038acf5 Update our CRA fork to 1.1.2 2018-04-05 15:36:48 +03:00
Kimmo Puputti
889d33224b CSP: whitelist google maps street view image domains 2018-03-22 11:17:30 +02:00
Kimmo Puputti
7add6815c6 Add more info to CSP error message 2018-03-20 11:06:07 +02:00
Kimmo Puputti
84b79f30d7 Add self to the example directive default value 2018-03-20 11:05:23 +02:00
Kimmo Puputti
e1b92501d1
Merge pull request #766 from sharetribe/more-small-fixes
Refactor CSP module
2018-03-19 13:57:37 +02:00
Kimmo Puputti
d7742ac670 Refactor CSP module 2018-03-19 12:48:53 +02:00
Mikko Koski
0c6cb3c950 Use http.Agent with keepalive set to true
Instantiate HTTP(S) Agents with keepAlive set to true.
This will reduce the request time for consecutive requests by
reusing the existing TCP connection, thus eliminating the time used
for setting up new TCP connections. The reduced response time can
be as much as 200ms.
2018-03-19 09:15:02 +02:00
Kimmo Puputti
19386f67e8 Remove https prefix from URLs 2018-03-16 15:19:35 +02:00
Kimmo Puputti
71d2c7a17f Allow google.com for analytics assets 2018-03-16 14:35:11 +02:00
Kimmo Puputti
4dccbd51ec Allow eval in scripts 2018-03-16 14:32:51 +02:00
Vesa Luusua
35206f0e0c Fix typo 2018-03-16 13:01:08 +02:00
Vesa Luusua
fb12628115 CSP improvements 2018-03-16 11:59:43 +02:00
Olli Vanhapiha
ee5103dae7
Merge pull request #755 from sharetribe/document-env-vars
Harmonize env var handling & document them
2018-03-15 23:25:50 +02:00
Olli Vanhapiha
42aeefd487 Ensure PORT is an integer 2018-03-15 23:00:01 +02:00
Vesa Luusua
44dca2dd80 Add more CSP rules 2018-03-15 14:35:14 +02:00
Olli Vanhapiha
6380d7569f Harmonize client & server env handling
* Remove defaults from multiple places in code. Put them to .env-template instead
* Do not use imported config.js in server. Access process.env directly instead
* Instruct using .env for local development, not .env.development.local
2018-03-15 14:27:57 +02:00
Vesa Luusua
1ec0fe4eff Allowed CSP URLs 2018-03-14 17:33:15 +02:00
Vesa Luusua
4e8f3597fa Use basic auth only if there're env variables set 2018-03-14 15:20:06 +02:00
Boyan Tabakov
7817979bb1 Add a simple static /_status.json page 2018-03-01 10:44:05 +02:00
Kimmo Puputti
f76264de0a Allow data URLs in scripts 2018-02-23 13:08:26 +02:00
Kimmo Puputti
8e0500fe7a Whitelist Stripe API in the CSP 2018-02-09 16:38:35 +02:00
Kimmo Puputti
34b0c18bdd Allow data URL for fonts 2018-02-08 13:40:10 +02:00
Kimmo Puputti
fe73399d4b If enabled, add Sentry API to the CSP whitelist 2018-01-18 14:42:24 +02:00
Kimmo Puputti
4552a9cf29 Add Content Security Policy (CSP) middleware 2018-01-18 14:08:27 +02:00
Kimmo Puputti
ca510877b6 Log code and data as well 2018-01-18 14:08:27 +02:00
Hannu Lyytikainen
85fbccb2fd Change to cleaner syntax for environment check 2017-11-17 15:10:13 +02:00
Hannu Lyytikainen
29160d6a45 Default to production environment 2017-11-17 14:49:26 +02:00
Hannu Lyytikainen
ce07746bee Add runtime environment variable
Add a variable that can be used to differentiate between dev, staging
and production environments.
2017-11-16 18:31:31 +02:00
Kimmo Puputti
3a1ed66c5e Fix configureStore params 2017-10-26 14:48:42 +03:00
Kimmo Puputti
945f6d4862 Inject Google Analytics when tracker ID is in the environment 2017-10-25 13:18:12 +03:00
Kimmo Puputti
e6f01befc6 Log server render info only in dev mode 2017-10-23 15:04:16 +03:00
Hannu Lyytikainen
97701d0200 Add a helper function and improve function naming 2017-10-19 15:17:43 +03:00
Hannu Lyytikainen
6f35929431 Extract domain and port resolving to functions
Also use the canonical root URL value to resolve the port.
2017-10-19 14:58:47 +03:00
Hannu Lyytikainen
2be909014f Add sitemap.xml and robots.txt files 2017-10-19 11:07:56 +03:00
Vesa Luusua
9ad17224df Ensure that server doesn't try to stringify Error 2017-10-18 18:07:24 +03:00
Kimmo Puputti
90ab9c9a69 Format with latest Prettier 2017-10-13 10:11:51 +03:00
Vesa Luusua
21fa9a86a7 Server side handles functional routeConfiguration 2017-10-11 14:18:30 +03:00
Kimmo Puputti
55eb4c1aac Merge pull request #467 from sharetribe/disable-response-caching
Disable response caching
2017-10-06 10:00:26 +03:00