RPJosh
/
authelia
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
authelia/internal
History
Clément Michaud b12d9d405f
[FEATURE] Add Content-Security-Policy meta to login portal. (#822) 
CSP is used to avoid some attacks where the hacker tries to execute
untrusted code in the browser.

The policy is to use assets hosted on the the original website and in order to make CSP work with material UI, a nonce is generated at each request of index.html and injected in the template as well as provided in the Content-Security-Policy header (https://material-ui.com/styles/advanced/#how-does-one-implement-csp)

Fix #815
 		2020-04-21 10:23:28 +10:00
..
authentication [MISC] Implement golint recommendations (#885) 2020-04-20 23:03:38 +02:00
authorization [MISC] Implement golint recommendations (#885) 2020-04-20 23:03:38 +02:00
commands [MISC] Implement golint recommendations (#885) 2020-04-20 23:03:38 +02:00
configuration [MISC] Implement golint recommendations (#885) 2020-04-20 23:03:38 +02:00
duo [MISC] Update durations to notation format and housekeeping (#824) 2020-04-05 22:37:21 +10:00
handlers [MISC] Implement golint recommendations (#885) 2020-04-20 23:03:38 +02:00
logging [FEATURE] [BREAKING] Support writing logs in a file. (#686) 2020-03-09 20:57:53 +01:00
middlewares [FEATURE] Customizable Email Subject (#830) 2020-04-09 10:21:28 +10:00
mocks [MISC] Implement golint recommendations (#885) 2020-04-20 23:03:38 +02:00
models [MISC] Implement golint recommendations (#885) 2020-04-20 23:03:38 +02:00
notification [Buildkite] Introduce CI linting with golangci-lint and reviewdog (#832) 2020-04-09 11:05:17 +10:00
regulation [Buildkite] Introduce CI linting with golangci-lint and reviewdog (#832) 2020-04-09 11:05:17 +10:00
server [FEATURE] Add Content-Security-Policy meta to login portal. (#822) 2020-04-21 10:23:28 +10:00
session [Buildkite] Introduce CI linting with golangci-lint and reviewdog (#832) 2020-04-09 11:05:17 +10:00
storage [Buildkite] Introduce CI linting with golangci-lint and reviewdog (#832) 2020-04-09 11:05:17 +10:00
suites [FEATURE] Add Content-Security-Policy meta to login portal. (#822) 2020-04-21 10:23:28 +10:00
templates Force TLS and valid x509 certs in SMTP Notifier by default 2020-01-10 17:37:16 +01:00
utils [MISC] Implement golint recommendations (#885) 2020-04-20 23:03:38 +02:00