extern/gotosocial
1
1
Fork 0
mirror of https://github.com/superseriousbusiness/gotosocial.git synced 2024-11-07 08:54:39 +01:00
Code Issues Packages Projects Releases Wiki Activity
3aedd937c3
gotosocial/internal
History
Daenney 3aedd937c3
[feature] Set Content-Security-Policy header (#2095) 
This adds the CSP header with a policy of only loading from the same
domain. We don't make use of external media, CSS, JS, fonts, so we don't
ever need external data loaded in our context.

When building a DEBUG build, the policy gets extended to include
localhost:*, i.e localhost on any port. This keeps the live-reloading
flow for JS development working. localhost and 127.0.0.1 are considered
to be the same so mixing and matching those doesn't result in a CSP
violation.
2023-08-11 13:20:56 +02:00
..
ap [feature] Hashtag federation (in/out), hashtag client API endpoints (#2032) 2023-07-31 15:47:35 +02:00
api [performance] remove last of relational queries to instead rely on caches (#2091) 2023-08-10 15:08:41 +01:00
cache [performance] remove last of relational queries to instead rely on caches (#2091) 2023-08-10 15:08:41 +01:00
cleaner [bugfix] Rework MultiError to wrap + unwrap errors properly (#2057) 2023-08-02 17:21:46 +02:00
config [performance] remove last of relational queries to instead rely on caches (#2091) 2023-08-10 15:08:41 +01:00
db [performance] remove last of relational queries to instead rely on caches (#2091) 2023-08-10 15:08:41 +01:00
email [bugfix] add From to email header (#1717) 2023-04-29 11:47:14 +02:00
federation [feature] List replies policy, refactor async workers (#2087) 2023-08-09 19:14:33 +02:00
gotosocial [chore] Update versions, fix lint errors (#1860) 2023-06-03 13:58:57 +02:00
gtscontext [bugfix/chore] oauth entropy fix + media cleanup tasks rewrite (#1853) 2023-06-22 20:46:36 +01:00
gtserror [feature] List replies policy, refactor async workers (#2087) 2023-08-09 19:14:33 +02:00
gtsmodel [chore] Remove go-playground/validator (#2069) 2023-08-06 12:22:40 +02:00
httpclient [bugfix] only set content-length AFTER rewinding body bytes (#2086) 2023-08-08 12:45:29 +01:00
id [chore] Improve copyright header handling (#1608) 2023-03-12 16:00:57 +01:00
iotools [chore] Improve copyright header handling (#1608) 2023-03-12 16:00:57 +01:00
log [chore] tidy up media manager, add calling func to errors, build-script improvements (#1835) 2023-05-28 14:08:35 +02:00
media [feature/performance] support uncaching remote emoji + scheduled cleanup functions (#1987) 2023-07-24 13:14:13 +01:00
messages [feature] List replies policy, refactor async workers (#2087) 2023-08-09 19:14:33 +02:00
middleware [feature] Set Content-Security-Policy header (#2095) 2023-08-11 13:20:56 +02:00
oauth [chore] Improve copyright header handling (#1608) 2023-03-12 16:00:57 +01:00
oidc [chore] Improve copyright header handling (#1608) 2023-03-12 16:00:57 +01:00
paging [performance] cache follow, follow request and block ID lists (#2027) 2023-07-31 11:25:29 +01:00
processing [bugfix] Populate followReq before accessing targetaccount pointer (#2099) 2023-08-11 11:05:49 +02:00
regexes [feature/performance] support uncaching remote emoji + scheduled cleanup functions (#1987) 2023-07-24 13:14:13 +01:00
router [bugfix] handle HEAD requests more elegantly (#2055) 2023-08-02 10:28:20 +02:00
state [feature] Add List functionality (#1802) 2023-05-25 10:37:38 +02:00
storage [feature/performance] support uncaching remote emoji + scheduled cleanup functions (#1987) 2023-07-24 13:14:13 +01:00
stream [feature] Add List functionality (#1802) 2023-05-25 10:37:38 +02:00
text [feature] Hashtag federation (in/out), hashtag client API endpoints (#2032) 2023-07-31 15:47:35 +02:00
timeline [bugfix] Fix incorrect per-loop variable capture (#2092) 2023-08-09 18:40:32 +02:00
tracing feat: initial tracing support (#1623) 2023-05-09 18:19:48 +01:00
trans [chore] Improve copyright header handling (#1608) 2023-03-12 16:00:57 +01:00
transport [feature] simpler cache size configuration (#2051) 2023-08-03 11:34:35 +02:00
typeutils [bugfix] Use length in runes when trimming for RSS (#2094) 2023-08-10 18:26:56 +02:00
uris [feature] Hashtag federation (in/out), hashtag client API endpoints (#2032) 2023-07-31 15:47:35 +02:00
util [chore] Use generic pointer function (#2080) 2023-08-07 18:38:11 +01:00
validate [feature] Allow full BCP 47 in language inputs (#2067) 2023-08-07 10:25:54 +02:00
visibility [feature] List replies policy, refactor async workers (#2087) 2023-08-09 19:14:33 +02:00
web [chore] Update robots.txt, give chatgpt the middle finger (#2085) 2023-08-08 13:16:34 +02:00
workers [feature] List replies policy, refactor async workers (#2087) 2023-08-09 19:14:33 +02:00