 El RIDO
|
fcb6422663
re-adding CSP directive sandbox allow-forms, it is needed for the password input form to work on the JS side
|
5 gadi atpakaļ |
 rugk
|
3ca01024fd
feat: disallow form submission alltogether
|
5 gadi atpakaļ |
|
rugk
|
5809a7cfa7
feat: add form-action CSP restriction
|
5 gadi atpakaļ |
|
rugk
|
fd7d05e862
Add base URL as default CSP restriction
|
5 gadi atpakaļ |
|
El RIDO
|
bb6a44ce7a
remove double translation, avoid unsupported double quotes in INI file
|
5 gadi atpakaļ |
 Andreas Schneider
|
eb32ea1419
Make it possible to change the info text
|
6 gadi atpakaļ |
 ZerooCool
|
e61c44ef46
Make Opengraph really functional
|
6 gadi atpakaļ |
|
ZerooCool
|
13c2f8d968
Make Opengraph really functional
|
6 gadi atpakaļ |
|
El RIDO
|
45a0535640
adding new flag to sandbox policy, introduced and required by Chrome 83 - fixes #634
|
6 gadi atpakaļ |
 Haocen Xu
|
bb9a5772bc
Add resource: to script-src cspheader to allowed rendering of pdf in
|
6 gadi atpakaļ |
|
El RIDO
|
9aac073a49
clarifying for #525 that none is a string, as PHP might evaluate it to NULL instead
|
6 gadi atpakaļ |
|
El RIDO
|
d5aeba60ca
increase default size limit to 10 MiB, documenting change
|
6 gadi atpakaļ |
|
El RIDO
|
8e27dbff15
clarify the use of 'unsafe-eval' and what the impact removing it has - Firefox users may not care and disable it to improve security
|
6 gadi atpakaļ |
|
Haocen Xu
|
ab75b183fb
Fix click on new paste on clone paste editing view not removing custom
|
7 gadi atpakaļ |
|
El RIDO
|
11375a4f59
moved referrer policy from CSP & meta to proper HTTP header to avoid browser console error message about unknown CSP header and to ensure it always applies before HTML is parsed, fixes #196
|
7 gadi atpakaļ |
|
El RIDO
|
c2e060d464
made compression configurable, fixes #38
|
7 gadi atpakaļ |
|
rugk
|
b7db033bdd
Adjust config text
|
7 gadi atpakaļ |
|
El RIDO
|
42c2003220
made notice configurable, fixing a few CSS glitches
|
7 gadi atpakaļ |
|
El RIDO
|
362045c664
re-add data-URLs to CSP for img-src, as these are used for the comment icons
|
7 gadi atpakaļ |
|
El RIDO
|
f915af1a5a
adjust CSP header to allow blob URLs
|
7 gadi atpakaļ |
|
El RIDO
|
398fabd664
Chrome requires unsafe-eval for it to parse and evaluate WASM modules
|
7 gadi atpakaļ |
|
El RIDO
|
720897b902
correct CSP to allow password prompt
|
8 gadi atpakaļ |
 rugk
|
60d4ccb02c
Add comment about blocked images
|
8 gadi atpakaļ |
|
El RIDO
|
d6f203dc4c
Removed option to hide clone button on expiring pastes, since this requires reading the paste for rendering the template, which leaks information on the pastes state
|
8 gadi atpakaļ |
|
El RIDO
|
caf87cc6f1
Merge branch 'master' into burnafterreading-fix, regression in expired paste error
|
8 gadi atpakaļ |
|
El RIDO
|
2c82279292
Merge branch 'attachment-handling' of https://github.com/thororm/PrivateBin into thororm-attachment-handling
|
8 gadi atpakaļ |
|
rugk
|
9c132cd839
Disallow form-action in CSP to limit outgoing connections
|
8 gadi atpakaļ |
|
rugk
|
414ab0eb71
Add config and basic page template support
|
8 gadi atpakaļ |
|
El RIDO
|
4ded4b7f8c
adding correct HTTP error to response, as per @rugk's recommentation
|
8 gadi atpakaļ |
|
El RIDO
|
6625a9dc59
hiding INI contents from StyleCI
|
8 gadi atpakaļ |
