grafana/scripts/grafana-server
Kristian Bremberg 35407142d0
Feature: Trusted Types support (#64975)
* Draft: Feature: Trusted Types support

* remove trusted-types package

* Create policy before jQuery and Angular is loaded and add feature flag

* Add trustedTypePolicies

* Sanitize scriptURL

* Add TT meta tag for test env

* Move trusted types into core

* Add DOMParser support for TrustedHTML

* Seperate RSS sanitization and add better TrustedHTML support

* Get test CSP header from config

* Remove dompurify dep from core

* Add documentation for trusted types

* Apply suggestions from code review

Co-authored-by: Kristian Bremberg <114284895+KristianGrafana@users.noreply.github.com>

* Add comment about Github discussion thread and things breaking

* Remove changes from News panel

* Remove TT feature toggle

* Expose TT and CSPReportOnly to frontend

* Log errors in console when CSP report only is enabled

* Log error for reporting and remove test mode

* Only insert CSP header in HTML for dev env

* Update docs

---------

Co-authored-by: Tobias Skarhed <tobias.skarhed@gmail.com>
Co-authored-by: Tobias Skarhed <1438972+tskarhed@users.noreply.github.com>
2023-04-27 18:20:37 +02:00
..
custom.ini Feature: Trusted Types support (#64975) 2023-04-27 18:20:37 +02:00
kill-server E2E: Rename end-to-end-tests-server to grafana-server (#44249) 2022-01-20 17:01:00 +00:00
start-server Tests: Add boilerplate code to support e2e tests on enterprise (#61959) 2023-01-26 18:04:13 -03:00
variables CI: Make e2e tests depend on binary builds (#44647) 2022-02-02 12:40:22 +02:00
wait-for-grafana E2E: Rename end-to-end-tests-server to grafana-server (#44249) 2022-01-20 17:01:00 +00:00