mirror of
https://github.com/grafana/grafana.git
synced 2024-12-01 21:19:28 -06:00
35407142d0
* Draft: Feature: Trusted Types support * remove trusted-types package * Create policy before jQuery and Angular is loaded and add feature flag * Add trustedTypePolicies * Sanitize scriptURL * Add TT meta tag for test env * Move trusted types into core * Add DOMParser support for TrustedHTML * Seperate RSS sanitization and add better TrustedHTML support * Get test CSP header from config * Remove dompurify dep from core * Add documentation for trusted types * Apply suggestions from code review Co-authored-by: Kristian Bremberg <114284895+KristianGrafana@users.noreply.github.com> * Add comment about Github discussion thread and things breaking * Remove changes from News panel * Remove TT feature toggle * Expose TT and CSPReportOnly to frontend * Log errors in console when CSP report only is enabled * Log error for reporting and remove test mode * Only insert CSP header in HTML for dev env * Update docs --------- Co-authored-by: Tobias Skarhed <tobias.skarhed@gmail.com> Co-authored-by: Tobias Skarhed <1438972+tskarhed@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| acl.go | ||
| alerting_test.go | ||
| alerting.go | ||
| annotations.go | ||
| apikey.go | ||
| dashboard.go | ||
| datasource.go | ||
| folder.go | ||
| frontend_settings.go | ||
| index.go | ||
| invite.go | ||
| live.go | ||
| models_test.go | ||
| models.go | ||
| org.go | ||
| playlist.go | ||
| plugins.go | ||
| prefs.go | ||
| short_url.go | ||
| user_token.go | ||
| user.go | ||