Age | Commit message (Collapse) | Author | |
---|---|---|---|
2019-08-19 | Fix CSP needlessly allowing blob URLs in script-src (#11620) | ThibG | |
2019-08-16 | Fix media host not being included in connect-src for OCR (#11577) | Eugen Rochko | |
2019-08-15 | Add OCR tool to media editing modal (#11566) | Eugen Rochko | |
2018-10-12 | Add manifest_src to CSP, add blob to connect_src (#8967) | ThibG | |
2018-10-12 | Fix CSP headers blocking media and development environment (#8962) | Eugen Rochko | |
Regression from #8957 | |||
2018-10-11 | Set Content-Security-Policy rules through RoR's config (#8957) | ThibG | |
* Set CSP rules in RoR's configuration * Override CSP setting in the embed controller to allow frames | |||
2018-04-12 | Upgrade Rails to version 5.2.0 (#5898) | Yamagishi Kazutoshi | |