9 Commits

Author	SHA1	Message	Date
Juncheol Cho	3292d95d8b	chore: add env parameter for enforce https (#1042) ... * env parameter for enforce https * Update app.js fix format for multi-line condition * Update app.js fix code format * Update app.js	2019-09-18 23:26:27 -07:00
Tom Moor	439ae1e832	fix: CSP for client-side editor uploads	2019-09-15 14:41:34 -07:00
Tom Moor	780c5c1129	fix: Add github gist styles to CSP	2019-08-27 23:26:32 -07:00
Tom Moor	b98c908568	fix: Add github gist to CSP ... closes #1028	2019-08-27 23:12:09 -07:00
Tom Moor	f1e8633623	fix: Add blob protocol to imgSrc	2019-08-27 09:21:53 -07:00
Tom Moor	468fd792ed	fix: Allow iframes in CSP	2019-08-23 19:39:40 -07:00
Tom Moor	c1bef2db59	fix: additional domains in CSP, dont send headers with API responses	2019-08-23 19:21:16 -07:00
Tom Moor	53cc69a413	fix: additional security headers by default	2019-08-23 19:00:38 -07:00
Tom Moor	07a941a65d	Websocket Support (#937) ... * Atom / RSS meta link * Spike * Feeling good about this spike now * Remove document.collection * Remove koa.ctx from all presenters to make them portable outside requests * Remove full serialized model from events Move events.add to controllers for now, will eventually be in commands * collections.create event parentDocument -> parentDocumentId * Fix up deprecated tests * Fixed: Doc creation * documents.move * Handle collection deleted * 💚 * Authorize room join requests * Move starred data structure Account for documents with no context on sockets * Add socket.io-redis * Add WEBSOCKETS_ENABLED env variable to disable websockets entirely for self hosted New installations will default to true, existing installations to false * 💚 No need for promise response here * Reload notice	2019-04-17 19:11:23 -07:00