overleaf/services/web/app/views
Alf Eaton a5637651b5 Add Content-Security-Policy header (#3783)
* Add Content-Security-Policy header
* Add nonce attribute to script tags
* Use source-map for webpack devtool
* Add ng-csp attribute when CSP is enabled
* Allow overriding CSP settings with environment variables
* Hook into render and allow routes to disable the CSP header

GitOrigin-RevId: a873736a3514198165f1b2f1e18d002b65f20d30
2021-03-26 03:04:55 +00:00
..
_mixins Remove optional hyphens from pug templates (#3788) 2021-03-25 03:05:05 +00:00
admin Merge pull request #3682 from overleaf/bg-check-maintenance-file 2021-02-26 03:04:07 +00:00
beta_program Merge pull request #3558 from overleaf/pr-logs-ui-beta-icon 2021-01-22 03:04:55 +00:00
blog WIP: migrate from jade to pug 2017-01-20 12:03:02 +00:00
general Merge pull request #3675 from overleaf/tm-main-landmarks-a11y 2021-03-05 03:05:00 +00:00
layout Merge pull request #3327 from overleaf/jpa-users-email-update 2020-10-31 03:05:41 +00:00
project Add Content-Security-Policy header (#3783) 2021-03-26 03:04:55 +00:00
referal Add Content-Security-Policy header (#3783) 2021-03-26 03:04:55 +00:00
subscriptions Add Content-Security-Policy header (#3783) 2021-03-26 03:04:55 +00:00
translations Remove optional hyphens from pug templates (#3788) 2021-03-25 03:05:05 +00:00
university Merge pull request #1543 from sharelatex/as-fix-potential-angular-xss 2019-03-18 10:37:15 +00:00
user Add Content-Security-Policy header (#3783) 2021-03-26 03:04:55 +00:00
user_membership Add Content-Security-Policy header (#3783) 2021-03-26 03:04:55 +00:00
view_templates Merge pull request #2524 from overleaf/sk-add-aria-attribs-on-close-buttons 2020-01-28 04:18:45 +00:00
_metadata.pug Remove optional hyphens from pug templates (#3788) 2021-03-25 03:05:05 +00:00
layout.pug Add Content-Security-Policy header (#3783) 2021-03-26 03:04:55 +00:00