Kyle Brandt 599514ad68 middleware: add security related HTTP(S) response headers (#17522) ...

* x_xss_protection
  * strict_transport_security (HSTS)
  * x_content_type_options

these are currently defaulted to false (off) until the next minor release.

fixes #17509

2019-06-12 13:15:50 +02:00

..

auth_proxy

auth_proxy: non-negative cache TTL (#17495)

2019-06-10 15:25:23 +02:00

auth_proxy.go

Auth Proxy: Log any error in middleware (#17275)

2019-05-27 10:38:17 +02:00

auth_test.go

Chore: use remote cache instead of session storage (#16114)

2019-04-08 14:31:46 +03:00

auth.go

teams: better names for api permissions.

2019-03-19 14:01:20 +01:00

dashboard_redirect_test.go

Chore: use remote cache instead of session storage (#16114)

2019-04-08 14:31:46 +03:00

dashboard_redirect.go

Revert "Opportunities to unindent code (unindent)"

2018-05-02 14:06:46 +02:00

headers.go

refactor datasource caching

2018-10-30 09:31:56 +01:00

logger.go

rename Context to ReqContext

2018-03-07 11:54:50 -05:00

middleware_test.go

LDAP: consistently name the LDAP entities (#17203)

2019-05-22 15:30:03 +03:00

middleware.go

middleware: add security related HTTP(S) response headers (#17522)

2019-06-12 13:15:50 +02:00

org_redirect_test.go

Auth: Enable retries and transaction for some db calls for auth tokens (#16785)

2019-04-30 14:42:01 +02:00

org_redirect.go

login users based on token cookie

2019-01-16 16:44:40 +01:00

perf.go

rename Context to ReqContext

2018-03-07 11:54:50 -05:00

quota_test.go

Auth: Enable retries and transaction for some db calls for auth tokens (#16785)

2019-04-30 14:42:01 +02:00

quota.go

use authtoken for session quota restrictions

2019-02-12 15:10:55 +01:00

recovery_test.go

Security: Responses from backend should not be cached (#16848)

2019-05-06 09:22:59 +02:00

recovery.go

move log package to /infra (#17023)

2019-05-13 08:45:54 +02:00

render_auth.go

Backend image rendering as plugin (#11966)

2018-05-24 15:26:27 +02:00

request_metrics.go

moves metric package to /infra

2019-02-24 21:12:51 +01:00

request_tracing.go

mark >=400 responses as error

2017-09-18 11:08:58 +02:00

util.go

prometheus: enable gzip for /metrics endpoint

2017-10-23 09:35:46 +02:00

validate_host.go

rename Context to ReqContext

2018-03-07 11:54:50 -05:00