Kyle Brandt 22a991ff66 middleware: add security related HTTP(S) response headers (#17522) ...

* x_xss_protection
  * strict_transport_security (HSTS)
  * x_content_type_options

these are currently defaulted to false (off) until the next minor release.

fixes #17509

(cherry picked from commit 599514ad68)

2019-06-17 12:07:51 +01:00

..

testdata

Config: Show user-friendly error message instead of stack trace (#16564)

2019-04-25 08:29:07 +02:00

setting_oauth.go

Update field name

2018-12-19 15:36:45 +02:00

setting_quota.go

Initial Baby Step to refactoring settings from global vars to instance (#11777)

2018-04-30 16:21:04 +02:00

setting_session_test.go

Chore: remove session storage references (#16445)

2019-04-22 18:58:24 +03:00

setting_smtp.go

Initial Baby Step to refactoring settings from global vars to instance (#11777)

2018-04-30 16:21:04 +02:00

setting_test.go

Config: Show user-friendly error message instead of stack trace (#16564)

2019-04-25 08:29:07 +02:00

setting.go

middleware: add security related HTTP(S) response headers (#17522)

2019-06-17 12:07:51 +01:00