Jenni Nurmi
d8bf1c926c
Update Sentry DSN related env variables and docs
2019-01-17 10:29:39 +02:00
Jenni Nurmi
21029f549e
Use new Sentry SDKs insted of Raven
2019-01-17 10:29:33 +02:00
Hannu Lyytikainen
7177cb37c7
Pass base url to SDK only if provided
2018-11-28 10:07:03 +02:00
Vesa Luusua
9d4dec2971
CSP: add mapbox api to img-src
2018-09-14 15:15:21 +03:00
Vesa Luusua
efeab41a5b
Add mapbox requirements to CSP rules
2018-09-14 15:15:15 +03:00
Kimmo Puputti
360a5a9a78
Update the Sharetribe Flex SDK to the 1.0.0 version in NPM
2018-08-07 13:08:35 +03:00
Hannu Lyytikäinen
42000675aa
Merge pull request #820 from sharetribe/app-rename
...
Remove occurrences of 'Starter App'
2018-05-08 13:13:20 +03:00
Hannu Lyytikainen
c50dc86559
Prefer the word customize over customise
2018-05-04 17:36:05 +03:00
Hannu Lyytikainen
89883b8e8a
Remove occurrences of 'Starter App'
2018-05-04 17:04:41 +03:00
Mikko Koski
759844112a
Use Transit Verbose mode in development
2018-04-12 16:28:16 +03:00
Vesa Luusua
59f038acf5
Update our CRA fork to 1.1.2
2018-04-05 15:36:48 +03:00
Kimmo Puputti
889d33224b
CSP: whitelist google maps street view image domains
2018-03-22 11:17:30 +02:00
Kimmo Puputti
7add6815c6
Add more info to CSP error message
2018-03-20 11:06:07 +02:00
Kimmo Puputti
84b79f30d7
Add self to the example directive default value
2018-03-20 11:05:23 +02:00
Kimmo Puputti
e1b92501d1
Merge pull request #766 from sharetribe/more-small-fixes
...
Refactor CSP module
2018-03-19 13:57:37 +02:00
Kimmo Puputti
d7742ac670
Refactor CSP module
2018-03-19 12:48:53 +02:00
Mikko Koski
0c6cb3c950
Use http.Agent with keepalive set to true
...
Instantiate HTTP(S) Agents with keepAlive set to true.
This will reduce the request time for consecutive requests by
reusing the existing TCP connection, thus eliminating the time used
for setting up new TCP connections. The reduced response time can
be as much as 200ms.
2018-03-19 09:15:02 +02:00
Kimmo Puputti
19386f67e8
Remove https prefix from URLs
2018-03-16 15:19:35 +02:00
Kimmo Puputti
71d2c7a17f
Allow google.com for analytics assets
2018-03-16 14:35:11 +02:00
Kimmo Puputti
4dccbd51ec
Allow eval in scripts
2018-03-16 14:32:51 +02:00
Vesa Luusua
35206f0e0c
Fix typo
2018-03-16 13:01:08 +02:00
Vesa Luusua
fb12628115
CSP improvements
2018-03-16 11:59:43 +02:00
Olli Vanhapiha
ee5103dae7
Merge pull request #755 from sharetribe/document-env-vars
...
Harmonize env var handling & document them
2018-03-15 23:25:50 +02:00
Olli Vanhapiha
42aeefd487
Ensure PORT is an integer
2018-03-15 23:00:01 +02:00
Vesa Luusua
44dca2dd80
Add more CSP rules
2018-03-15 14:35:14 +02:00
Olli Vanhapiha
6380d7569f
Harmonize client & server env handling
...
* Remove defaults from multiple places in code. Put them to .env-template instead
* Do not use imported config.js in server. Access process.env directly instead
* Instruct using .env for local development, not .env.development.local
2018-03-15 14:27:57 +02:00
Vesa Luusua
1ec0fe4eff
Allowed CSP URLs
2018-03-14 17:33:15 +02:00
Vesa Luusua
4e8f3597fa
Use basic auth only if there're env variables set
2018-03-14 15:20:06 +02:00
Boyan Tabakov
7817979bb1
Add a simple static /_status.json page
2018-03-01 10:44:05 +02:00
Kimmo Puputti
f76264de0a
Allow data URLs in scripts
2018-02-23 13:08:26 +02:00
Kimmo Puputti
8e0500fe7a
Whitelist Stripe API in the CSP
2018-02-09 16:38:35 +02:00
Kimmo Puputti
34b0c18bdd
Allow data URL for fonts
2018-02-08 13:40:10 +02:00
Kimmo Puputti
fe73399d4b
If enabled, add Sentry API to the CSP whitelist
2018-01-18 14:42:24 +02:00
Kimmo Puputti
4552a9cf29
Add Content Security Policy (CSP) middleware
2018-01-18 14:08:27 +02:00
Kimmo Puputti
ca510877b6
Log code and data as well
2018-01-18 14:08:27 +02:00
Hannu Lyytikainen
85fbccb2fd
Change to cleaner syntax for environment check
2017-11-17 15:10:13 +02:00
Hannu Lyytikainen
29160d6a45
Default to production environment
2017-11-17 14:49:26 +02:00
Hannu Lyytikainen
ce07746bee
Add runtime environment variable
...
Add a variable that can be used to differentiate between dev, staging
and production environments.
2017-11-16 18:31:31 +02:00
Kimmo Puputti
3a1ed66c5e
Fix configureStore params
2017-10-26 14:48:42 +03:00
Kimmo Puputti
945f6d4862
Inject Google Analytics when tracker ID is in the environment
2017-10-25 13:18:12 +03:00
Kimmo Puputti
e6f01befc6
Log server render info only in dev mode
2017-10-23 15:04:16 +03:00
Hannu Lyytikainen
97701d0200
Add a helper function and improve function naming
2017-10-19 15:17:43 +03:00
Hannu Lyytikainen
6f35929431
Extract domain and port resolving to functions
...
Also use the canonical root URL value to resolve the port.
2017-10-19 14:58:47 +03:00
Hannu Lyytikainen
2be909014f
Add sitemap.xml and robots.txt files
2017-10-19 11:07:56 +03:00
Vesa Luusua
9ad17224df
Ensure that server doesn't try to stringify Error
2017-10-18 18:07:24 +03:00
Kimmo Puputti
90ab9c9a69
Format with latest Prettier
2017-10-13 10:11:51 +03:00
Vesa Luusua
21fa9a86a7
Server side handles functional routeConfiguration
2017-10-11 14:18:30 +03:00
Kimmo Puputti
55eb4c1aac
Merge pull request #467 from sharetribe/disable-response-caching
...
Disable response caching
2017-10-06 10:00:26 +03:00
Kimmo Puputti
32ff790277
Skip basic auth for static resources
2017-10-06 09:55:03 +03:00
Kimmo Puputti
0a2f3a4faa
Disable HTTP caching for dynamic responses
2017-10-05 14:13:24 +03:00