chalec
/
ctrlv-privatebin
6
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
ctrlv-privatebin/lib
History
rugk fd7d05e862
Add base URL as default CSP restriction 
This follows an [HTTP Observatory recommendation](https://observatory.mozilla.org/analyze/privatebin.net):
> Restricts use of the <base> tag by using base-uri 'none', base-uri 'self', or specific origins.

Given we don't use that anywhere, this safe should be safe. (not tested practically though)
 		2021-04-16 22:04:28 +02:00
..
Data incrementing version 2021-04-05 17:05:14 +02:00
Model incrementing version 2021-04-05 17:05:14 +02:00
Persistence incrementing version 2021-04-05 17:05:14 +02:00
.htaccess updating shipped .htaccess files for Apache 2.4 as per https://httpd.apache.org/docs/2.4/upgrading.html#access - Thanks @EchoDev, fixes #194 2017-03-11 08:56:14 +01:00
Configuration.php Add base URL as default CSP restriction 2021-04-16 22:04:28 +02:00
Controller.php transmit cookie only over HTTPS, fixes #472 2021-04-16 20:15:12 +02:00
Filter.php incrementing version 2021-04-05 17:05:14 +02:00
FormatV2.php incrementing version 2021-04-05 17:05:14 +02:00
I18n.php set plurals for and credit Estonian translation 2021-04-16 18:27:12 +02:00
Json.php incrementing version 2021-04-05 17:05:14 +02:00
Model.php incrementing version 2021-04-05 17:05:14 +02:00
Request.php incrementing version 2021-04-05 17:05:14 +02:00
View.php incrementing version 2021-04-05 17:05:14 +02:00
Vizhash16x16.php incrementing version 2021-04-05 17:05:14 +02:00