bookstack

Commit Graph

Author	SHA1	Message	Date
Dan Brown	92922288dd	Added iframe CSP, improved session cookie security Added iframe CSP headers with configuration via .env. Updated session cookies to be lax by default, dynamically changing to none when iframes configured to allow third-party control. Updated cookie security to be auto-secure if a https APP_URL is set. Related to #2427 and #2207.	2021-01-02 02:43:50 +00:00
Dan Brown	6917ea088f	Upgraded app to Laravel 5.7	2019-09-06 23:36:16 +01:00
Dan Brown	97fdfa6ebe	Moved config dir into app dir Closes #1506	2019-07-06 13:44:50 +01:00

Author

SHA1

Message

Date

Dan Brown

92922288dd

Added iframe CSP, improved session cookie security

Added iframe CSP headers with configuration via .env.
Updated session cookies to be lax by default, dynamically changing to
none when iframes configured to allow third-party control.
Updated cookie security to be auto-secure if a https APP_URL is set.

Related to #2427 and #2207.

2021-01-02 02:43:50 +00:00

Dan Brown

6917ea088f

Upgraded app to Laravel 5.7

2019-09-06 23:36:16 +01:00

Dan Brown

97fdfa6ebe

Moved config dir into app dir

Closes #1506

2019-07-06 13:44:50 +01:00

3 Commits