David Mehren 3cd169a650 Remove unsafe-eval from default CSP ...

As script-loader was removed in the previous commits,
we can finally tighten up security.

Signed-off-by: David Mehren <git@herrmehren.de>

2021-06-07 23:04:45 +02:00

..

config

Automatically enable protocolUseSSL when useSSL is set

2021-05-06 21:19:14 +02:00

migrations

Add missing catch

2020-12-02 19:39:06 +01:00

models

Sanitize username and photo URL

2021-05-09 19:28:44 +02:00

ot

Fix logging in ot module

2018-11-13 23:30:13 +01:00

web

SAML: Use privateKey option

2021-05-17 18:46:00 +02:00

workers

Linter: Fix all lint errors

2021-02-15 12:15:14 +01:00

csp.js

Remove unsafe-eval from default CSP

2021-06-07 23:04:45 +02:00

errors.js

Check for existing notes on POST and dont override them

2021-03-29 23:00:34 +02:00

history.js

Linter: Fix all lint errors

2021-02-15 12:15:14 +01:00

letter-avatars.js

Linter: Fix all lint errors

2021-02-15 12:15:14 +01:00

logger.js

Fix eslint warnings

2019-05-31 00:30:29 +02:00

prometheus.js

Add custom prometheus metrics

2021-04-25 20:06:56 +02:00

realtime.js

Linter: Fix all lint errors

2021-02-15 12:15:14 +01:00

response.js

Replace request library with node-fetch

2021-03-12 22:27:49 +01:00

utils.js

Linter: Fix all lint errors

2021-02-15 12:15:14 +01:00