Aaron
|
f5bb74e921
|
index.js: Add "data:" as an allowed image source in CSP
Signed-off-by: Aaron <admin@datahoarder.dev>
|
2021-04-21 21:40:15 +02:00 |
|
Romain Hv
|
a0bc20aeb6
|
Remove metrics #4
|
2021-03-15 19:56:51 +01:00 |
|
timvisee
|
3165086869
|
Remove legal page, add no affiliation text in footer
|
2021-01-09 19:14:42 +01:00 |
|
io mintz
|
44c03e355f
|
CSP: remove a bunch of unused mozilla-only domains and FXA domains
|
2020-11-13 22:24:38 +00:00 |
|
Danny Coates
|
b5ef1785ab
|
replaced fxa-geodb with load balancer header
Co-authored-by: timvisee <tim@visee.me>
|
2020-10-16 15:51:28 +02:00 |
|
Danny Coates
|
ccbcb69666
|
Merge pull request #1434 from MichaelPeter-Shockoe/master
modify connect-src of Content Security Policy to include dynamic wss URL based on configured base URL
|
2020-07-09 19:37:02 -07:00 |
|
jackyzy823
|
e2876b119d
|
add configs to handle content-security-policy correctly for custom fxa urls
|
2020-06-11 21:57:48 +08:00 |
|
Michael Peter
|
5ff6266a5e
|
modify connect-src of Content Security Policy to include dynamic wss URL based on configured base URL
|
2020-01-17 17:47:09 -05:00 |
|
Danny Coates
|
d5c488196d
|
no-cache harder
|
2019-09-05 13:33:12 -07:00 |
|
Danny Coates
|
58191975b9
|
stubbed /login page for redirect base login flow
|
2019-07-23 09:27:34 -07:00 |
|
Danny Coates
|
b9c87fd779
|
updated tailwindcss to 1.0
|
2019-06-14 11:37:30 -07:00 |
|
Danny Coates
|
efea0e5ab0
|
added gravatar to CSP image-src
|
2019-03-31 13:04:15 -07:00 |
|
Danny Coates
|
8cf3b89f91
|
increase file id to 8 bytes
|
2019-03-26 09:32:44 -07:00 |
|
Danny Coates
|
fb0f0f0b5d
|
added gcp dev to csp
|
2019-03-06 12:59:54 -08:00 |
|
Danny Coates
|
445811931f
|
added accounts.firefox.com to csp connect-src for /metrics-flow
|
2019-03-05 13:05:51 -08:00 |
|
Danny Coates
|
f968083f74
|
added '-' to /api/filelist validation
|
2019-02-26 19:58:03 -08:00 |
|
Danny Coates
|
4cb6646cce
|
updated filelist storage so userid is not used directly
|
2019-02-26 13:53:11 -08:00 |
|
Danny Coates
|
1c44d1d0f9
|
added /config endpoint, use fewer globals (#1172)
* added /config endpoint, use fewer globals
* fixed integration tests
|
2019-02-26 10:39:50 -08:00 |
|
Danny Coates
|
cccc1a5383
|
enabled accounts on Edge
|
2019-02-25 11:44:44 -08:00 |
|
Danny Coates
|
c146c584f6
|
static require cryptofill for Edge
|
2019-02-21 11:21:06 -08:00 |
|
Danny Coates
|
8eaacfea18
|
use text/plain on /api/metrics
|
2019-02-15 11:59:39 -08:00 |
|
Danny Coates
|
9b37e92a81
|
implemented amplitude metrics (#1141)
|
2019-02-12 11:50:06 -08:00 |
|
Danny Coates
|
d4528848d9
|
moved jsconfig code into initScript
|
2018-11-20 12:23:05 -08:00 |
|
Danny Coates
|
416b9902cb
|
added a webmanifest (#1023)
|
2018-11-20 15:00:32 -05:00 |
|
Danny Coates
|
932a2a4576
|
removed unused code
|
2018-11-01 10:44:47 -07:00 |
|
Danny Coates
|
0e5202c470
|
updated modal
|
2018-11-01 10:44:45 -07:00 |
|
Danny Coates
|
cc85486414
|
wip
|
2018-11-01 10:43:14 -07:00 |
|
Danny Coates
|
a997a44a23
|
renamed auth route
|
2018-09-26 12:22:51 -07:00 |
|
Danny Coates
|
c8bf3101aa
|
fixed multiple issues with the /signin page. #935 #936 #937
|
2018-09-24 12:01:39 -07:00 |
|
Danny Coates
|
7ccf462bf8
|
implemented PKCE auth (#921)
* implemented PKCE auth
* removed node-jose
* added PKCE tests
|
2018-09-14 11:00:33 -04:00 |
|
Danny Coates
|
fb7176d989
|
added fxa auth to /params
|
2018-08-31 11:43:56 -07:00 |
|
Danny Coates
|
718d74fa50
|
Implemented FxA
|
2018-08-30 22:10:08 -07:00 |
|
Emily
|
c9ae76b209
|
hook multifile to ui
|
2018-08-03 16:10:00 -07:00 |
|
Danny Coates
|
d14aeb29e9
|
began adding capability flags
|
2018-07-31 11:29:26 -07:00 |
|
Danny Coates
|
ddeaf8076d
|
added wss to csp connect-src
|
2018-07-12 14:27:49 -07:00 |
|
Danny Coates
|
af7a262ef0
|
refactored upload away from multipart forms to binary data
|
2018-05-31 14:10:02 -07:00 |
|
Danny Coates
|
74728782f3
|
removed unsafe-inline styles via svgo-loader. fixes #740
|
2018-02-26 11:48:28 -08:00 |
|
Danny Coates
|
22e836c98a
|
removed unused deps
|
2018-02-24 18:00:43 -08:00 |
|
Danny Coates
|
3fd2537311
|
refactored server
|
2018-02-09 15:03:05 -08:00 |
|
Danny Coates
|
1c5e47b4c4
|
validate id param without middleware
|
2018-02-05 17:21:32 -08:00 |
|
Danny Coates
|
aae61f9451
|
extracted server id validation
|
2018-02-05 16:37:06 -08:00 |
|
Danny Coates
|
97ad674be2
|
added /api/info/:id route
|
2018-01-30 17:29:51 -08:00 |
|
Danny Coates
|
7b4060f9e1
|
Added multiple download option
|
2017-12-04 15:52:31 -08:00 |
|
Danny Coates
|
b54f4575ee
|
allow inline styles. fixes #644
|
2017-11-15 10:54:13 -08:00 |
|
Danny Coates
|
bfcdf9340d
|
use fluent-langneg for subtag support
|
2017-11-10 12:40:18 -08:00 |
|
Danny Coates
|
2e233da16d
|
unsupport MS Edge (for now, sorry) and some http header nits
|
2017-11-06 13:36:56 -08:00 |
|
Danny Coates
|
bc24a069da
|
Add optional password to the download url
|
2017-10-10 10:45:10 -07:00 |
|
Danny Coates
|
74718d6361
|
disable CSP when env = development
|
2017-08-29 11:19:21 -07:00 |
|
Danny Coates
|
0a31e2d521
|
fixed __heartbeat__ route
|
2017-08-25 10:03:49 -07:00 |
|
Danny Coates
|
53e822964e
|
a few changes to make A/B testing easier
|
2017-08-25 09:44:52 -07:00 |
|