6 Commits

Author	SHA1	Message	Date
Ruben Fiszel	5cbc87e025	add COOKIE_DOMAIN to set domain of cookies	2022-11-18 09:06:10 +01:00
Ruben Fiszel	2d9e9909da	fix(backend): apps backend v0 (#888) ... * progress * post merge * progress * fix * fix * fix * fix * v1 * fix openapi	2022-11-12 20:17:08 +01:00
Jakub Kołodziejczak	e08ca0423c	refactor(backend): improve memory footprint related to csp (#866)	2022-11-07 01:29:37 +01:00
Jakub Kołodziejczak	3333713644	chore(backend): set csp based on env var (#864) ... * chore(backend): set csp based on env var * use extension instead of reading directly from env var	2022-11-06 22:35:37 +01:00
Jakub Kołodziejczak	7040bbe4c9	fix(backend): tighten http security headers (#860) ... * fix(backend): set http security headers (vol.1) * (vol.2) minimal *working* content security policy * (vol.3) set csp only if https and if hosted on cloud * improve generics * get CLOUD_HOSTED from extension * remove X-XSS-Protection rationale as per: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection * conditionally set all security related http headers	2022-11-06 17:07:25 +01:00
Kai Jellinghaus	0034129a30	restructure the entire backend layout using workspaces (#815)	2022-10-29 11:58:06 +02:00