 Danny Coates
|
ccbcb69666
Merge pull request #1434 from MichaelPeter-Shockoe/master
|
4 years ago |
|
jackyzy823
|
e2876b119d
add configs to handle content-security-policy correctly for custom fxa urls
|
4 years ago |
|
Michael Peter
|
5ff6266a5e
modify connect-src of Content Security Policy to include dynamic wss URL based on configured base URL
|
5 years ago |
|
Danny Coates
|
d5c488196d
no-cache harder
|
5 years ago |
|
Danny Coates
|
58191975b9
stubbed /login page for redirect base login flow
|
5 years ago |
|
Danny Coates
|
b9c87fd779
updated tailwindcss to 1.0
|
5 years ago |
|
Danny Coates
|
efea0e5ab0
added gravatar to CSP image-src
|
5 years ago |
|
Danny Coates
|
8cf3b89f91
increase file id to 8 bytes
|
5 years ago |
|
Danny Coates
|
fb0f0f0b5d
added gcp dev to csp
|
6 years ago |
|
Danny Coates
|
445811931f
added accounts.firefox.com to csp connect-src for /metrics-flow
|
6 years ago |
|
Danny Coates
|
f968083f74
added '-' to /api/filelist validation
|
6 years ago |
|
Danny Coates
|
4cb6646cce
updated filelist storage so userid is not used directly
|
6 years ago |
|
Danny Coates
|
1c44d1d0f9
added /config endpoint, use fewer globals (#1172)
|
6 years ago |
|
Danny Coates
|
cccc1a5383
enabled accounts on Edge
|
6 years ago |
|
Danny Coates
|
c146c584f6
static require cryptofill for Edge
|
6 years ago |
|
Danny Coates
|
8eaacfea18
use text/plain on /api/metrics
|
6 years ago |
|
Danny Coates
|
9b37e92a81
implemented amplitude metrics (#1141)
|
6 years ago |
|
Danny Coates
|
d4528848d9
moved jsconfig code into initScript
|
6 years ago |
|
Danny Coates
|
416b9902cb
added a webmanifest (#1023)
|
6 years ago |
|
Danny Coates
|
932a2a4576
removed unused code
|
6 years ago |
|
Danny Coates
|
0e5202c470
updated modal
|
6 years ago |
|
Danny Coates
|
cc85486414
wip
|
6 years ago |
|
Danny Coates
|
a997a44a23
renamed auth route
|
6 years ago |
|
Danny Coates
|
c8bf3101aa
fixed multiple issues with the /signin page. #935 #936 #937
|
6 years ago |
|
Danny Coates
|
7ccf462bf8
implemented PKCE auth (#921)
|
6 years ago |
|
Danny Coates
|
fb7176d989
added fxa auth to /params
|
6 years ago |
|
Danny Coates
|
718d74fa50
Implemented FxA
|
6 years ago |
|
Emily
|
c9ae76b209
hook multifile to ui
|
6 years ago |
|
Danny Coates
|
d14aeb29e9
began adding capability flags
|
6 years ago |
|
Danny Coates
|
ddeaf8076d
added wss to csp connect-src
|
6 years ago |
|
Danny Coates
|
af7a262ef0
refactored upload away from multipart forms to binary data
|
6 years ago |
|
Danny Coates
|
74728782f3
removed unsafe-inline styles via svgo-loader. fixes #740
|
7 years ago |
|
Danny Coates
|
22e836c98a
removed unused deps
|
7 years ago |
|
Danny Coates
|
3fd2537311
refactored server
|
7 years ago |
|
Danny Coates
|
1c5e47b4c4
validate id param without middleware
|
7 years ago |
|
Danny Coates
|
aae61f9451
extracted server id validation
|
7 years ago |
|
Danny Coates
|
97ad674be2
added /api/info/:id route
|
7 years ago |
|
Danny Coates
|
7b4060f9e1
Added multiple download option
|
7 years ago |
|
Danny Coates
|
b54f4575ee
allow inline styles. fixes #644
|
7 years ago |
|
Danny Coates
|
bfcdf9340d
use fluent-langneg for subtag support
|
7 years ago |
|
Danny Coates
|
2e233da16d
unsupport MS Edge (for now, sorry) and some http header nits
|
7 years ago |
|
Danny Coates
|
bc24a069da
Add optional password to the download url
|
7 years ago |
|
Danny Coates
|
74718d6361
disable CSP when env = development
|
7 years ago |
|
Danny Coates
|
0a31e2d521
fixed __heartbeat__ route
|
7 years ago |
|
Danny Coates
|
53e822964e
a few changes to make A/B testing easier
|
7 years ago |
