+2
78596a6756
Migrate to Wire for dependency injection ( #32289 )
...
Fixes #30144
Co-authored-by: dsotirakis <sotirakis.dim@gmail.com >
Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com >
Co-authored-by: Ida Furjesova <ida.furjesova@grafana.com >
Co-authored-by: Jack Westbrook <jack.westbrook@gmail.com >
Co-authored-by: Will Browne <wbrowne@users.noreply.github.com >
Co-authored-by: Leon Sorokin <leeoniya@gmail.com >
Co-authored-by: Andrej Ocenas <mr.ocenas@gmail.com >
Co-authored-by: spinillos <selenepinillos@gmail.com >
Co-authored-by: Karl Persson <kalle.persson@grafana.com >
Co-authored-by: Leonard Gram <leo@xlson.com >
2021-08-25 15:11:22 +02:00
kay delaney and GitHub
8143991b94
Security: Update default CSP template and fix firefox CSP issues ( #34836 )
...
* Security: Update default content_security_policy_template
- Add 'strict-dynamic' back to script-src
- Add ws(s)://$ROOT_PATH to connect-src
- Change onEvent to on-event in angular templates to fix CSP issues in firefox.
- Add blob: to style-src
2021-05-28 17:01:10 +02:00
Arve Knudsen and GitHub
aed1c013c0
CSP: Relax default template wrt. loading of scripts, due to nonces not working ( #34363 )
...
* CSP: Relax default template, due to nonces not working
Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com >
* CSP: Add back data: to img-src
Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com >
2021-05-19 11:37:14 +02:00
Arve Knudsen and GitHub
d1a9044171
CSP: Allow all image sources by default ( #34265 )
...
Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com >
2021-05-18 13:41:55 +02:00
Arve Knudsen and GitHub
50b649a869
Middleware: Add CSP support ( #29740 )
...
* Middleware: Add support for CSP
Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com >
Co-authored by @iOrcohen
2021-01-12 07:42:32 +01:00
kay delaneyandGitHub
