grafana

Author SHA1 Message Date

Author	SHA1	Message	Date
Grot (@grafanabot)	1e533f37ed	Security: Update default CSP template and fix firefox CSP issues (#34836 ) (#35162 ) * Security: Update default content_security_policy_template - Add 'strict-dynamic' back to script-src - Add ws(s)://$ROOT_PATH to connect-src - Change onEvent to on-event in angular templates to fix CSP issues in firefox. - Add blob: to style-src (cherry picked from commit `8143991b94`)	2021-06-03 12:11:14 +01:00
Ryan McKinley	bc857986b6	Chore: remove CSP debug logging line (#30689 )	2021-01-27 13:31:41 -08:00
Arve Knudsen	50b649a869	Middleware: Add CSP support (#29740 ) * Middleware: Add support for CSP Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com> Co-authored by @iOrcohen	2021-01-12 07:42:32 +01:00

Grot (@grafanabot)

1e533f37ed

Security: Update default CSP template and fix firefox CSP issues (#34836 ) (#35162 )

* Security: Update default content_security_policy_template
- Add 'strict-dynamic' back to script-src
- Add ws(s)://$ROOT_PATH to connect-src
- Change onEvent to on-event in angular templates to fix CSP issues in firefox.
- Add blob: to style-src

(cherry picked from commit 8143991b94)

2021-06-03 12:11:14 +01:00

Ryan McKinley bc857986b6 Chore: remove CSP debug logging line (#30689 ) 2021-01-27 13:31:41 -08:00

Arve Knudsen

50b649a869

Middleware: Add CSP support (#29740 )

* Middleware: Add support for CSP

Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com>

Co-authored by @iOrcohen

2021-01-12 07:42:32 +01:00

3 Commits