5 Commits

Author	SHA1	Message	Date
Arve Knudsen	78596a6756	Migrate to Wire for dependency injection (#32289) ... Fixes #30144 Co-authored-by: dsotirakis <sotirakis.dim@gmail.com> Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com> Co-authored-by: Ida Furjesova <ida.furjesova@grafana.com> Co-authored-by: Jack Westbrook <jack.westbrook@gmail.com> Co-authored-by: Will Browne <wbrowne@users.noreply.github.com> Co-authored-by: Leon Sorokin <leeoniya@gmail.com> Co-authored-by: Andrej Ocenas <mr.ocenas@gmail.com> Co-authored-by: spinillos <selenepinillos@gmail.com> Co-authored-by: Karl Persson <kalle.persson@grafana.com> Co-authored-by: Leonard Gram <leo@xlson.com>	2021-08-25 15:11:22 +02:00
kay delaney	8143991b94	Security: Update default CSP template and fix firefox CSP issues (#34836) ... * Security: Update default content_security_policy_template - Add 'strict-dynamic' back to script-src - Add ws(s)://$ROOT_PATH to connect-src - Change onEvent to on-event in angular templates to fix CSP issues in firefox. - Add blob: to style-src	2021-05-28 17:01:10 +02:00
Arve Knudsen	aed1c013c0	CSP: Relax default template wrt. loading of scripts, due to nonces not working (#34363) ... * CSP: Relax default template, due to nonces not working Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com> * CSP: Add back data: to img-src Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com>	2021-05-19 11:37:14 +02:00
Arve Knudsen	d1a9044171	CSP: Allow all image sources by default (#34265) ... Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com>	2021-05-18 13:41:55 +02:00
Arve Knudsen	50b649a869	Middleware: Add CSP support (#29740) ... * Middleware: Add support for CSP Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com> Co-authored by @iOrcohen	2021-01-12 07:42:32 +01:00