Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add the ability to set Content Security Policies #6631

Merged
merged 87 commits into from Jan 16, 2024
Merged

Add the ability to set Content Security Policies #6631

merged 87 commits into from Jan 16, 2024

Commits on Feb 21, 2023

  1. add CSP

    @fritzmg
    fritzmg committed Feb 21, 2023
    Copy the full SHA
    6a34219 View commit details
    Browse the repository at this point in the history

  2. fix line endings

    @fritzmg
    fritzmg committed Feb 21, 2023
    Copy the full SHA
    967f1ae View commit details
    Browse the repository at this point in the history

Commits on Jun 26, 2023

  1. merge with 5.x

    @fritzmg
    fritzmg committed Jun 26, 2023
    Copy the full SHA
    6b36350 View commit details
    Browse the repository at this point in the history

Commits on Jun 29, 2023

  1. cs fix

    @fritzmg
    fritzmg committed Jun 29, 2023
    Copy the full SHA
    014c8e6 View commit details
    Browse the repository at this point in the history

Commits on Sep 17, 2023

  1. Merge remote-tracking branch 'origin/5.x' into csp

    @fritzmg
    fritzmg committed Sep 17, 2023
    Copy the full SHA
    a008dce View commit details
    Browse the repository at this point in the history

  2. update dependencies

    @fritzmg
    fritzmg committed Sep 17, 2023
    Copy the full SHA
    07de412 View commit details
    Browse the repository at this point in the history

  3. introduce script component

    @fritzmg
    fritzmg committed Sep 17, 2023
    Copy the full SHA
    2473309 View commit details
    Browse the repository at this point in the history

  4. mvp

    @fritzmg
    fritzmg committed Sep 17, 2023
    Copy the full SHA
    4ce5d5d View commit details
    Browse the repository at this point in the history

  5. add style component

    @fritzmg
    fritzmg committed Sep 17, 2023
    Copy the full SHA
    b211d7f View commit details
    Browse the repository at this point in the history

  6. remove unnecessary scopes

    @fritzmg
    fritzmg committed Sep 17, 2023
    Copy the full SHA
    0ec6738 View commit details
    Browse the repository at this point in the history

Commits on Dec 16, 2023

  1. move templates to new location

    @fritzmg
    fritzmg committed Dec 16, 2023
    Copy the full SHA
    9b7dbc4 View commit details
    Browse the repository at this point in the history

  2. Merge remote-tracking branch 'origin/5.x' into csp

    @fritzmg
    fritzmg committed Dec 16, 2023
    Copy the full SHA
    9bdbf32 View commit details
    Browse the repository at this point in the history

  3. add accidental removal

    @fritzmg
    fritzmg committed Dec 16, 2023
    Copy the full SHA
    420bf35 View commit details
    Browse the repository at this point in the history

  4. improve the implementation

    @fritzmg
    fritzmg committed Dec 16, 2023
    Copy the full SHA
    0fa2265 View commit details
    Browse the repository at this point in the history

  5. remove parameter definition

    @fritzmg
    fritzmg committed Dec 16, 2023
    Copy the full SHA
    613368c View commit details
    Browse the repository at this point in the history

Commits on Dec 17, 2023

  1. remove getNonce method

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    7c86310 View commit details
    Browse the repository at this point in the history

  2. Merge remote-tracking branch 'origin/5.x' into csp

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    7432de8 View commit details
    Browse the repository at this point in the history

  3. validate CSP

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    fe45eed View commit details
    Browse the repository at this point in the history

  4. fix toolbar

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    a7466d6 View commit details
    Browse the repository at this point in the history

  5. fix toolbar yet again

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    a0f8ef9 View commit details
    Browse the repository at this point in the history

  6. consolidate CspRuntime and fix absolute source paths

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    c9505eb View commit details
    Browse the repository at this point in the history

  7. fix reporting

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    99ac12a View commit details
    Browse the repository at this point in the history

  8. only add nonce if necessary

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    24e56f1 View commit details
    Browse the repository at this point in the history

  9. remove unrelated change

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    9029d31 View commit details
    Browse the repository at this point in the history

  10. code style

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    1274da8 View commit details
    Browse the repository at this point in the history

  11. add tests

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    87017e5 View commit details
    Browse the repository at this point in the history

  12. fix service name

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    05f7141 View commit details
    Browse the repository at this point in the history

  13. revert changes to stylesheet component

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    ae8faa5 View commit details
    Browse the repository at this point in the history

  14. satisfy PHP stan

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    067dfce View commit details
    Browse the repository at this point in the history

  15. update test

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    ee4a542 View commit details
    Browse the repository at this point in the history

  16. fix ci

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    db52a54 View commit details
    Browse the repository at this point in the history

  17. increase nelmio/security-bundle requirements

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    4a52f50 View commit details
    Browse the repository at this point in the history

  18. Merge remote-tracking branch 'origin/5.x' into csp

    @fritzmg
    fritzmg committed Dec 17, 2023
    Copy the full SHA
    2767dd3 View commit details
    Browse the repository at this point in the history

Commits on Dec 18, 2023

  1. Merge branch '5.x' into csp

    @fritzmg
    fritzmg committed Dec 18, 2023
    Copy the full SHA
    b7f5180 View commit details
    Browse the repository at this point in the history

  2. update csp-builder and security-bundle requirements, satisfy PHP stan

    @fritzmg
    fritzmg committed Dec 18, 2023
    Copy the full SHA
    2e312ca View commit details
    Browse the repository at this point in the history

  3. merge with 5.x

    @fritzmg
    fritzmg committed Dec 18, 2023
    Copy the full SHA
    9131551 View commit details
    Browse the repository at this point in the history

Commits on Dec 19, 2023

  1. overhaul

    @fritzmg
    fritzmg committed Dec 19, 2023
    Copy the full SHA
    bda5f21 View commit details
    Browse the repository at this point in the history

  2. fix test

    @fritzmg
    fritzmg committed Dec 19, 2023
    Copy the full SHA
    67cd1a6 View commit details
    Browse the repository at this point in the history

Commits on Dec 22, 2023

  1. merge with 5.x

    @fritzmg
    fritzmg committed Dec 22, 2023
    Copy the full SHA
    f365461 View commit details
    Browse the repository at this point in the history

  2. fix accidental öö

    @fritzmg
    fritzmg committed Dec 22, 2023
    Copy the full SHA
    2598948 View commit details
    Browse the repository at this point in the history

  3. Update core-bundle/contao/templates/twig/component/_script.html.twig 

    Co-authored-by: M. Vondano <m-vo@users.noreply.github.com>
    @fritzmg @m-vo
    fritzmg and m-vo committed Dec 22, 2023
    Copy the full SHA
    0fc5c61 View commit details
    Browse the repository at this point in the history

  4. fix _style.html.twig

    @fritzmg
    fritzmg committed Dec 22, 2023
    Copy the full SHA
    ba71e55 View commit details
    Browse the repository at this point in the history

Commits on Dec 23, 2023

  1. do not use any legacy CPS headers

    @fritzmg
    fritzmg committed Dec 23, 2023
    Copy the full SHA
    13715f0 View commit details
    Browse the repository at this point in the history

  2. change exception message 

    Co-authored-by: Yanick Witschi <yanick.witschi@terminal42.ch>
    @fritzmg @Toflar
    fritzmg and Toflar committed Dec 23, 2023
    Copy the full SHA
    ccf927d View commit details
    Browse the repository at this point in the history

  3. fix test

    @fritzmg
    fritzmg committed Dec 23, 2023
    Copy the full SHA
    af9a9db View commit details
    Browse the repository at this point in the history

  4. move to private function

    @fritzmg
    fritzmg committed Dec 23, 2023
    Copy the full SHA
    4510a92 View commit details
    Browse the repository at this point in the history

  5. allow to enable report logging in website root

    @fritzmg
    fritzmg committed Dec 23, 2023
    Copy the full SHA
    13b3c2a View commit details
    Browse the repository at this point in the history

  6. remove remnant config

    @fritzmg
    fritzmg committed Dec 23, 2023
    Copy the full SHA
    8356ac4 View commit details
    Browse the repository at this point in the history

  7. add comment

    @fritzmg
    fritzmg committed Dec 23, 2023
    Copy the full SHA
    c727221 View commit details
    Browse the repository at this point in the history

  8. fix prefer lowest

    @fritzmg
    fritzmg committed Dec 23, 2023
    Copy the full SHA
    4cffecf View commit details
    Browse the repository at this point in the history

  9. code style

    @fritzmg
    fritzmg committed Dec 23, 2023
    Copy the full SHA
    6e8538e View commit details
    Browse the repository at this point in the history

  10. fix functional tests differently

    @fritzmg
    fritzmg committed Dec 23, 2023
    Copy the full SHA
    ad61e35 View commit details
    Browse the repository at this point in the history

  11. remove remnant

    @fritzmg
    fritzmg committed Dec 23, 2023
    Copy the full SHA
    8d0bd31 View commit details
    Browse the repository at this point in the history

  12. fix another remnant

    @fritzmg
    fritzmg committed Dec 23, 2023
    Copy the full SHA
    a0f2e74 View commit details
    Browse the repository at this point in the history

  13. restore previous response context finalisation

    @fritzmg
    fritzmg committed Dec 23, 2023
    Copy the full SHA
    0ceea3f View commit details
    Browse the repository at this point in the history

Commits on Dec 30, 2023

  1. merge with 5.x

    @fritzmg
    fritzmg committed Dec 30, 2023
    Copy the full SHA
    b7cae39 View commit details
    Browse the repository at this point in the history

  2. use textarea for csp field

    @fritzmg
    fritzmg committed Dec 30, 2023
    Copy the full SHA
    a9fdea8 View commit details
    Browse the repository at this point in the history

Commits on Jan 8, 2024

  1. Apply suggestions from code review 

    Co-authored-by: Yanick Witschi <yanick.witschi@terminal42.ch>
    @fritzmg @Toflar
    fritzmg and Toflar committed Jan 8, 2024
    Copy the full SHA
    20a5e7f View commit details
    Browse the repository at this point in the history

  2. move addCspSource to bottom

    @fritzmg
    fritzmg committed Jan 8, 2024
    Copy the full SHA
    7056144 View commit details
    Browse the repository at this point in the history

  3. merge with 5.x

    @fritzmg
    fritzmg committed Jan 8, 2024
    Copy the full SHA
    76082c7 View commit details
    Browse the repository at this point in the history

  4. do not call nonce statically

    @fritzmg
    fritzmg committed Jan 8, 2024
    Copy the full SHA
    e90cb34 View commit details
    Browse the repository at this point in the history

  5. do not print line number if none given

    @fritzmg
    fritzmg committed Jan 8, 2024
    Copy the full SHA
    482cebd View commit details
    Browse the repository at this point in the history

  6. code style

    @fritzmg
    fritzmg committed Jan 8, 2024
    Copy the full SHA
    4b83528 View commit details
    Browse the repository at this point in the history

Commits on Jan 9, 2024

  1. Reuse HtmlAttributes (#5)

    @Toflar
    Toflar committed Jan 9, 2024
    Copy the full SHA
    35e1f6e View commit details
    Browse the repository at this point in the history

  2. Merge remote-tracking branch 'origin/5.x' into csp

    @fritzmg
    fritzmg committed Jan 9, 2024
    Copy the full SHA
    dceaf2b View commit details
    Browse the repository at this point in the history

  3. fix test

    @fritzmg
    fritzmg committed Jan 9, 2024
    Copy the full SHA
    9d2459b View commit details
    Browse the repository at this point in the history

  4. implement fallback logic for addSource

    @fritzmg
    fritzmg committed Jan 9, 2024
    Copy the full SHA
    dbac1d6 View commit details
    Browse the repository at this point in the history

  5. add more tests

    @fritzmg
    fritzmg committed Jan 9, 2024
    Copy the full SHA
    43ce805 View commit details
    Browse the repository at this point in the history

  6. fix accidental change

    @fritzmg
    fritzmg committed Jan 9, 2024
    Copy the full SHA
    f745ea2 View commit details
    Browse the repository at this point in the history

Commits on Jan 10, 2024

  1. Merge branch '5.x' into csp

    @leofeyer
    leofeyer committed Jan 10, 2024
    Copy the full SHA
    51f6a1c View commit details
    Browse the repository at this point in the history

  2. set default-src 'self' as default policy

    @fritzmg
    fritzmg committed Jan 10, 2024
    Copy the full SHA
    1874f78 View commit details
    Browse the repository at this point in the history

  3. fix errors in inline generation

    @fritzmg
    fritzmg committed Jan 10, 2024
    Copy the full SHA
    b885a67 View commit details
    Browse the repository at this point in the history

  4. Merge branch '5.x' into csp

    @fritzmg
    fritzmg committed Jan 10, 2024
    Copy the full SHA
    633100f View commit details
    Browse the repository at this point in the history

Commits on Jan 11, 2024

  1. add Model annotations

    @fritzmg
    fritzmg committed Jan 11, 2024
    Copy the full SHA
    a9f7b3b View commit details
    Browse the repository at this point in the history

  2. Merge remote-tracking branch 'origin/5.x' into csp

    @fritzmg
    fritzmg committed Jan 11, 2024
    Copy the full SHA
    40608d7 View commit details
    Browse the repository at this point in the history

Commits on Jan 12, 2024

  1. CS

    @leofeyer
    leofeyer committed Jan 12, 2024
    Copy the full SHA
    4b88e07 View commit details
    Browse the repository at this point in the history

  2. change translation

    @fritzmg
    fritzmg committed Jan 12, 2024
    Copy the full SHA
    23a441d View commit details
    Browse the repository at this point in the history

  3. Merge remote-tracking branch 'origin/5.x' into csp

    @fritzmg
    fritzmg committed Jan 12, 2024
    Copy the full SHA
    335d277 View commit details
    Browse the repository at this point in the history

  4. remove _script and _style components

    @fritzmg
    fritzmg committed Jan 12, 2024
    Copy the full SHA
    4fdd33f View commit details
    Browse the repository at this point in the history

  5. Merge remote-tracking branch 'origin/5.x' into csp

    @fritzmg
    fritzmg committed Jan 12, 2024
    Copy the full SHA
    27d5517 View commit details
    Browse the repository at this point in the history

  6. remove comma

    @fritzmg
    fritzmg committed Jan 12, 2024
    Copy the full SHA
    e0c27eb View commit details
    Browse the repository at this point in the history

Commits on Jan 15, 2024

  1. Fix the templates and the CI chain

    @leofeyer
    leofeyer committed Jan 15, 2024
    Copy the full SHA
    5f2fcb3 View commit details
    Browse the repository at this point in the history

  2. Adjust the palettes

    @leofeyer
    leofeyer committed Jan 15, 2024
    Copy the full SHA
    0503587 View commit details
    Browse the repository at this point in the history

  3. Merge remote-tracking branch 'origin/5.x' into csp

    @fritzmg
    fritzmg committed Jan 15, 2024
    Copy the full SHA
    b1766b6 View commit details
    Browse the repository at this point in the history

  4. make tl_page.csp mandatory

    @fritzmg
    fritzmg committed Jan 15, 2024
    Copy the full SHA
    25ad7c7 View commit details
    Browse the repository at this point in the history

  5. always use 'document-uri' and always set an URL

    @fritzmg
    fritzmg committed Jan 15, 2024
    Copy the full SHA
    8f892e0 View commit details
    Browse the repository at this point in the history

  6. fix test

    @fritzmg
    fritzmg committed Jan 15, 2024
    Copy the full SHA
    284ed0c View commit details
    Browse the repository at this point in the history