* fix(backend): set http security headers (vol.1) * (vol.2) minimal *working* content security policy * (vol.3) set csp only if https and if hosted on cloud * improve generics * get CLOUD_HOSTED from extension * remove X-XSS-Protection rationale as per: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection * conditionally set all security related http headers
Windmill Backend
This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.
Components
| name | description |
|---|---|
| windmill-api | The API server, exposing functionality to other components and the frontend |
| windmill-api-client | An autogenerated Rust API client, used by other components to talk to the API |
| windmill-audit | Contains audit functionality, allowing different components to record important actions |
| windmill-common | Common code shared by all crates |
| windmill-queue | Contains job & flow queuing functionality, commonly written to by the API server and read from by workers |
| windmill-worker | The worker. Used to process and execute flows & jobs. |
| parsers | Contains code to parse signatures in different langauges. |