summaryrefslogtreecommitdiff
path: root/lib/pleroma/plugs/http_security_plug.ex
AgeCommit message (Expand)Author
2020-10-13moving plugs into web dirAlexander Strizhakov
2020-07-12MediaProxy whitelist setting now supports hosts with schemeAlexander Strizhakov
2020-07-09Use the Pleroma.Config aliasMark Felder
2020-07-06IO list, not concatenationMark Felder
2020-07-06Simplify the logicMark Felder
2020-07-05Ensure all CSP parameters for remote hosts have a schemeMark Felder
2020-07-03Rename function and clarify that CSP is only strict with MediaProxy enabledMark Felder
2020-07-03Add Captcha endpoint to CSP headers when MediaProxy is enabled.Mark Felder
2020-06-11Check for media proxy base_url, not Upload base_urlMark Felder
2020-06-10HTTP security plug: add media proxy base url host to csprinpatch
2020-05-29Merge branch 'bugfix/csp-unproxied' into 'develop'rinpatch
2020-05-29Apply suggestion to lib/pleroma/plugs/http_security_plug.exrinpatch
2020-05-29Add blob: to connect-src CSPAlex Gleason
2020-05-29http_security_plug.ex: Fix non-proxied mediaHaelwenn (lanodan) Monnier
2020-05-29HTTP Security plug: make starting csp string generation more readablerinpatch
2020-05-27HTTP security plug: Harden img-src and media-src when MediaProxy is enabledrinpatch
2020-05-27HTTP Security plug: rewrite &csp_string/0rinpatch
2020-04-26Let blob: pass CSPAlex Gleason
2020-03-02Bump copyright years of files changed after 2020-01-07Haelwenn (lanodan) Monnier
2020-01-30Update http_security_plug.exfeld
2020-01-29Fix credo warningEgor Kislitsyn
2020-01-29Make the warning more scarierEgor Kislitsyn
2020-01-28Warn if HTTPSecurityPlug is disabledEgor Kislitsyn
2019-06-06Replace Mix.env with Pleroma.Config.get(:env)rinpatch
2019-05-16add report uri and report toAlex S
2019-05-03Standardize construction of websocket URLfeld
2019-03-05Plugs.HTTPSecurityPlug: Add static_url to CSP's connect-srcHaelwenn (lanodan) Monnier
2019-02-12Plugs.HTTPSecurityPlug: Add webpacker to connect-srcHaelwenn (lanodan) Monnier
2019-02-12Plugs.HTTPSecurityPlug: Add unsafe-eval to script-src when in dev modeHaelwenn (lanodan) Monnier
2019-02-12Use url[:scheme] instead of protocol to determine if https is enabledshibayashi
2018-12-31update copyright years to 2019William Pitcock
2018-12-23add license boilerplate to pleroma coreWilliam Pitcock
2018-12-09fix compile warningsMaksim Pechnikov
2018-11-26Plugs.HTTPSecurityPlug: Activate upgrade-insecure-requests only when there is...Haelwenn (lanodan) Monnier
2018-11-26Add manifest-src to allow manifest.jsonshibayashi
2018-11-16http security: remove form-action from CSP definitionsWilliam Pitcock
2018-11-12http security: allow referrer-policy to be configuredWilliam Pitcock
2018-11-12rename CSPPlug to HTTPSecurityPlug.William Pitcock
generated by cgit v1.2.3 (git 2.44.0) at 2024-05-06 15:45:58 +0000