GoToSocial/docs
Daenney 3aedd937c3
[feature] Set Content-Security-Policy header (#2095)
This adds the CSP header with a policy of only loading from the same
domain. We don't make use of external media, CSS, JS, fonts, so we don't
ever need external data loaded in our context.

When building a DEBUG build, the policy gets extended to include
localhost:*, i.e localhost on any port. This keeps the live-reloading
flow for JS development working. localhost and 127.0.0.1 are considered
to be the same so mixing and matching those doesn't result in a CSP
violation.
2023-08-11 13:20:56 +02:00
..
admin [chore] Fix password typos (#1966) 2023-07-09 18:25:37 +02:00
advanced [docs] Apache setup for Caching assets and media (#2005) (#2005) 2023-07-20 18:48:52 +02:00
api [feature] Hashtag federation (in/out), hashtag client API endpoints (#2032) 2023-07-31 15:47:35 +02:00
assets [chore] Add Feditext as recommended client (#2081) 2023-08-08 12:19:41 +02:00
configuration [docs] fix postgres create database command (#2071) 2023-08-06 11:54:07 +02:00
federation [feature] Hashtag federation (in/out), hashtag client API endpoints (#2032) 2023-07-31 15:47:35 +02:00
getting_started [feature] Set Content-Security-Policy header (#2095) 2023-08-11 13:20:56 +02:00
user_guide [feature] Hashtag federation (in/out), hashtag client API endpoints (#2032) 2023-07-31 15:47:35 +02:00
environment.yml [chore] update readthedocs deps, use conda (#1742) 2023-05-06 17:33:37 +02:00
faq.md [chore] Add Feditext as recommended client (#2081) 2023-08-08 12:19:41 +02:00
index.md [chore] Add Feditext as recommended client (#2081) 2023-08-08 12:19:41 +02:00
swagger.go [feature] Add List functionality (#1802) 2023-05-25 10:37:38 +02:00