404b89eb28
update recommended settings for embedding to permit element desktop
3 years ago
b4323b2c40
fix incorrect frame-ancestors and update test
3 years ago
e6c51e3dff
remove hardcoded translations and invert remote embedding logic
3 years ago
a54a0af604
more tests on checkup page
3 years ago
0917b45035
implement proper support for forbidding remote media-tag inclusion
...
...and test that the basic headers are correctly set on the checkup page
3 years ago
b40c81d088
support modifying CSP headers at runtime
3 years ago
7b6c8b83ef
stricter websocket CSP and tests to match
3 years ago
383684d339
add new, very specific tests for CSP to the checkup page
3 years ago
29fe4b7223
restrict unnecessarily permissive CSP
3 years ago
b8d6af7891
adjust CSP headers for printing from OnlyOffice
...
* allow outer to load resources from the sandbox (for fonts)
* test whether the expected CSP values are present on the checkup page
* simplify the nodejs server a bit
3 years ago
7a682397e2
Add checkup test about Google's Floc
4 years ago
43a5d5664f
remove XXX
4 years ago
ead97d8f41
Remove FAQ and references to it
4 years ago
66d434b583
Remove about page from defaults and add XXX for future pages
4 years ago
a2b79d84b8
align nodejs http headers with example nginx
4 years ago
cfcfe2f65f
enable APIs for XLSX export in firefox
4 years ago
b32f3e34af
fix local worker debugging on firefox
5 years ago
3cf09924ae
fix default CSP headers
5 years ago
3df47a1415
continued WIP config reorganization
5 years ago
294a444603
WIP removing defaults from the example config file
5 years ago
ansuz