Marcus Efraimsson 1c1427520d Security: Add new setting allow_embedding (#16853) ...

When allow_embedding is false (default) the Grafana backend 
will set the http header `X-Frame-Options: deny` in all responses 
to non-static content which will instruct browser to not allow 
Grafana to be embedded in `<frame>`, `<iframe>`, 
`<embed>` or `<object>`.

Closes #14189

2019-05-06 09:56:23 +02:00

..

auth_proxy

LDAP: Added reload endpoint for LDAP config (#15470)

2019-05-03 14:53:07 +02:00

auth_proxy.go

Chore: refactor auth proxy (#16504)

2019-04-16 14:09:18 +02:00

auth_test.go

Chore: use remote cache instead of session storage (#16114)

2019-04-08 14:31:46 +03:00

auth.go

teams: better names for api permissions.

2019-03-19 14:01:20 +01:00

dashboard_redirect_test.go

Chore: use remote cache instead of session storage (#16114)

2019-04-08 14:31:46 +03:00

dashboard_redirect.go

Revert "Opportunities to unindent code (unindent)"

2018-05-02 14:06:46 +02:00

headers.go

refactor datasource caching

2018-10-30 09:31:56 +01:00

logger.go

rename Context to ReqContext

2018-03-07 11:54:50 -05:00

middleware_test.go

Security: Add new setting allow_embedding (#16853)

2019-05-06 09:56:23 +02:00

middleware.go

Security: Add new setting allow_embedding (#16853)

2019-05-06 09:56:23 +02:00

org_redirect_test.go

Auth: Enable retries and transaction for some db calls for auth tokens (#16785)

2019-04-30 14:42:01 +02:00

org_redirect.go

login users based on token cookie

2019-01-16 16:44:40 +01:00

perf.go

rename Context to ReqContext

2018-03-07 11:54:50 -05:00

quota_test.go

Auth: Enable retries and transaction for some db calls for auth tokens (#16785)

2019-04-30 14:42:01 +02:00

quota.go

use authtoken for session quota restrictions

2019-02-12 15:10:55 +01:00

recovery_test.go

Security: Responses from backend should not be cached (#16848)

2019-05-06 09:22:59 +02:00

recovery.go

fix for issue with error view in production builds

2018-11-20 13:47:45 +01:00

render_auth.go

Backend image rendering as plugin (#11966)

2018-05-24 15:26:27 +02:00

request_metrics.go

moves metric package to /infra

2019-02-24 21:12:51 +01:00

request_tracing.go

mark >=400 responses as error

2017-09-18 11:08:58 +02:00

util.go

prometheus: enable gzip for /metrics endpoint

2017-10-23 09:35:46 +02:00

validate_host.go

rename Context to ReqContext

2018-03-07 11:54:50 -05:00