Commit graph

16 commits

Author SHA1 Message Date
ansuz
0917b45035 implement proper support for forbidding remote media-tag inclusion
...and test that the basic headers are correctly set on the checkup page
2022-02-18 16:09:02 +05:30
ansuz
b40c81d088 support modifying CSP headers at runtime 2022-02-18 13:54:33 +05:30
ansuz
7b6c8b83ef stricter websocket CSP and tests to match 2022-02-14 11:45:44 +05:30
ansuz
383684d339 add new, very specific tests for CSP to the checkup page 2022-02-10 16:53:14 +05:30
ansuz
29fe4b7223 restrict unnecessarily permissive CSP 2022-01-21 18:01:55 +05:30
ansuz
b8d6af7891 adjust CSP headers for printing from OnlyOffice
* allow outer to load resources from the sandbox (for fonts)
* test whether the expected CSP values are present on the checkup page
* simplify the nodejs server a bit
2021-10-19 14:22:10 +05:30
yflory
7a682397e2 Add checkup test about Google's Floc 2021-05-07 14:23:15 +02:00
ansuz
43a5d5664f remove XXX 2021-01-21 17:42:41 +05:30
David Benqué
ead97d8f41 Remove FAQ and references to it 2020-11-16 11:06:48 +00:00
David Benqué
66d434b583 Remove about page from defaults and add XXX for future pages 2020-10-30 14:29:15 +00:00
ansuz
a2b79d84b8 align nodejs http headers with example nginx 2020-10-27 08:12:23 +05:30
ansuz
cfcfe2f65f enable APIs for XLSX export in firefox 2020-10-07 14:47:43 +05:30
ansuz
b32f3e34af fix local worker debugging on firefox 2020-03-06 11:43:34 -05:00
ansuz
3cf09924ae fix default CSP headers 2020-02-28 10:46:44 -05:00
ansuz
3df47a1415 continued WIP config reorganization 2020-02-27 13:24:19 -05:00
ansuz
294a444603 WIP removing defaults from the example config file 2020-02-27 13:09:12 -05:00