Jakob Ackermann
29aa7c622a
Merge pull request #7105 from overleaf/jpa-static-no-csp
...
[web] remove CSP header from static assets
GitOrigin-RevId: 2f12974f490ff22796ed74c38a466fe4649877c1
2022-03-18 09:03:07 +00:00
Jakob Ackermann
224edddad4
[web] set a default, strict CSP on ALL endpoints ( #6271 )
...
* Remove use of CSP_PERCENTAGE
* Move header calculation earlier
* Set a default policy and add comments
* Apply the CSP header to all responses
* Enable CSP in dev environment
* [web] set a default, strict CSP on ALL endpoints
* [misc] enable CSP in dev-env
* Only build the default policy once
* Update docker-compose.yml
* [web] webpack: set default CSP header on webpack assets
This aligns the webpack dev-server with production in nocdn=true mode.
Co-authored-by: Alf Eaton <alf.eaton@overleaf.com>
GitOrigin-RevId: 088a6082ad21c5b3f229887ba0ab3eca8d0528cd
2022-03-18 09:03:01 +00:00
Alf Eaton
669bec323c
Merge pull request #4185 from overleaf/ae-react-devtool-toggle
...
Fix React DevTools enable/disable toggle
GitOrigin-RevId: 505e948af96b9ecc658b5e809dce98a5e72dca0f
2021-06-12 02:08:40 +00:00
Jakob Ackermann
10e7a919c0
Merge pull request #4172 from overleaf/ae-enable-react-dev-tools
...
Re-enable React Dev Tools
GitOrigin-RevId: 2757888b03997b9df55f1ef1a8fa0cca71cbcc78
2021-06-11 02:06:14 +00:00
Alf Eaton
1be43911b4
Merge pull request #3942 from overleaf/prettier-trailing-comma
...
Set Prettier's "trailingComma" setting to "es5"
GitOrigin-RevId: 9f14150511929a855b27467ad17be6ab262fe5d5
2021-04-28 02:10:01 +00:00
Alf Eaton
a5637651b5
Add Content-Security-Policy header ( #3783 )
...
* Add Content-Security-Policy header
* Add nonce attribute to script tags
* Use source-map for webpack devtool
* Add ng-csp attribute when CSP is enabled
* Allow overriding CSP settings with environment variables
* Hook into render and allow routes to disable the CSP header
GitOrigin-RevId: a873736a3514198165f1b2f1e18d002b65f20d30
2021-03-26 03:04:55 +00:00
Jessica Lawshe
5338990fb3
Merge pull request #3676 from overleaf/ae-webpack-live-reload
...
Enable live reload in webpack-dev-server
GitOrigin-RevId: 4e6b3f26513e1b0a119993511125fae4643e7e82
2021-02-23 03:04:27 +00:00
Alf Eaton
5bc4ce09a7
Merge pull request #3523 from overleaf/ae-source-map
...
Use devtool: 'eval-source-map'
GitOrigin-RevId: c2b5a7b4052754f8654c46580890fbde87f443a5
2021-01-07 03:04:37 +00:00
Alasdair Smith
26190da566
Merge pull request #2349 from overleaf/as-webpack-css
...
Compile CSS using webpack
GitOrigin-RevId: 489834038667dde572ea5d9b4b9392b362259a09
2019-11-28 10:39:09 +00:00
Hugh O'Brien
bf9473fb41
Merge pull request #2320 from overleaf/as-unify-webpack-output
...
Unify webpack output
GitOrigin-RevId: 5f5ae88f0698236fdce17cf87b4b524078dba4dd
2019-11-18 11:21:42 +00:00
Alasdair Smith
78c30015f4
Merge pull request #2265 from overleaf/as-move-vendored-deps
...
Move vendored dependencies out of output directory
GitOrigin-RevId: bad086bdc2a80f9df5d3f934098cb7b05e8f6db5
2019-10-30 11:35:56 +00:00
Alasdair Smith
9cf73f965c
Merge pull request #1440 from overleaf/as-amd-webpack
...
Bundle all frontend code with webpack
GitOrigin-RevId: 1bd93dad516c456fe1649193868e841e20459b0b
2019-10-16 10:36:21 +00:00
Eric Mc Sween
2df7a8eaad
Merge pull request #2032 from overleaf/as-upgrade-webpack
...
Upgrade webpack to v4
GitOrigin-RevId: a92c487fee79c29c5314273bf05439c9dbb0ce4d
2019-08-06 12:34:03 +00:00
Alasdair Smith
984ecae200
Rename directory to es to align with coffee dir
2018-01-15 16:23:10 +00:00
Alasdair Smith
dadd74e730
Move public path to dev config
2018-01-15 16:23:10 +00:00
Alasdair Smith
49c27c4c7a
Port webpack config from OL
2018-01-15 16:23:10 +00:00
