aboutsummaryrefslogtreecommitdiff
path: root/lib/pleroma/plugs/http_security_plug.ex
AgeCommit message (Expand)Author
2020-05-01Let blob: pass CSPAlex Gleason
2020-03-02Bump copyright years of files changed after 2020-01-07Haelwenn (lanodan) Monnier
2020-01-30Update http_security_plug.exfeld
2020-01-29Fix credo warningEgor Kislitsyn
2020-01-29Make the warning more scarierEgor Kislitsyn
2020-01-28Warn if HTTPSecurityPlug is disabledEgor Kislitsyn
2019-06-06Replace Mix.env with Pleroma.Config.get(:env)rinpatch
2019-05-16add report uri and report toAlex S
2019-05-03Standardize construction of websocket URLfeld
2019-03-05Plugs.HTTPSecurityPlug: Add static_url to CSP's connect-srcHaelwenn (lanodan) Monnier
2019-02-12Plugs.HTTPSecurityPlug: Add webpacker to connect-srcHaelwenn (lanodan) Monnier
2019-02-12Plugs.HTTPSecurityPlug: Add unsafe-eval to script-src when in dev modeHaelwenn (lanodan) Monnier
2019-02-12Use url[:scheme] instead of protocol to determine if https is enabledshibayashi
2018-12-31update copyright years to 2019William Pitcock
2018-12-23add license boilerplate to pleroma coreWilliam Pitcock
2018-12-09fix compile warningsMaksim Pechnikov
2018-11-26Plugs.HTTPSecurityPlug: Activate upgrade-insecure-requests only when there is...Haelwenn (lanodan) Monnier
2018-11-26Add manifest-src to allow manifest.jsonshibayashi
2018-11-16http security: remove form-action from CSP definitionsWilliam Pitcock
2018-11-12http security: allow referrer-policy to be configuredWilliam Pitcock
2018-11-12rename CSPPlug to HTTPSecurityPlug.William Pitcock