8 Commits

Author	SHA1	Message	Date
jkoberg	30a0f8a71b	fix(ocis): get rid of go-chi/cors lib ... Signed-off-by: jkoberg <jkoberg@owncloud.com>	2024-07-18 11:34:49 +02:00
Thomas Müller	bdbba929d0	feat: add CSP and other security related headers in the oCIS proxy service (#8777) ... * feat: add CSP and other security related headers in the oCIS proxy service * fix: consolidate security related headers - drop middleware.Secure * fix: use github.com/DeepDiver1975/secure * fix: acceptance tests * feat: support env var replacements in csp.yaml	2024-04-26 09:10:35 +02:00
Michael Barz	189987bcbd	Bump major version to v2	2022-05-04 14:49:59 +02:00
David Christofas	9ecc065879	update CORS middleware and make it configurable	2021-10-22 13:27:31 +02:00
David Christofas	c370276198	add some information about the security headers	2021-10-22 12:01:00 +02:00
David Christofas	4a30624fe8	remove deprecated X-XSS-Protection header ... Only legacy browsers are still supporting this header. See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection#browser_compatibility.	2021-10-22 12:00:56 +02:00
Benedikt Kulmann	aaf9029a3e	Rename "Cache" middleware to "NoCache"	2020-11-16 22:13:26 +01:00
A.Unger	c284b4d07b	Add 'ocis-pkg/' from commit '72d605ba3857d0b972ddd72e226d8a5360fb480d' ... git-subtree-dir: ocis-pkg git-subtree-mainline: 4c12bed11b git-subtree-split: 72d605ba38	2020-09-18 12:34:50 +02:00