13 commits

Author	SHA1	Message	Date
Liam	2e5b0678cd	Remove obsolete block-all-mixed-content ... This was removed in all major browsers with no replacement. See https://www.w3.org/TR/mixed-content/#strict-checking for details on the obsolescence.	2024-06-23 11:52:20 -04:00
Liam	852f870ccf	USe compile-time environment checks	2024-05-03 21:06:15 -04:00
Nighty	dd8c2c81d9	Vite HMR for JS/TS (and jankily for CSS) (#242) ... * prelim work on vite reload * the best solution to a problem is usually the easiest one	2024-04-30 13:13:46 -04:00
liamwhite	77548057e8	Relax CSP on development error pages (#238)	2024-04-28 14:09:08 -04:00
liamwhite	10fc962da6	Video upload previews (#141)	2021-10-05 21:31:50 -04:00
byte[]	8c881da01c	whoops	2021-03-17 19:17:59 -04:00
byte[]	35e12420af	strongly segregate domains of main site and ugc in security policy	2021-03-16 20:24:58 -04:00
liamwhite	653fd0a4af	hCaptcha (#19)	2020-09-12 13:43:16 -04:00
byte[]	113908f820	allow CSP customization on a per-controller basis	2020-08-23 18:30:58 -04:00
byte[]	5b760436a1	ensure CSP plug config happens at runtime, not compile time	2020-08-06 13:27:56 -04:00
byte[]	ed44160603	run formatter	2020-01-10 23:20:19 -05:00
byte[]	b2724c0de8	samesite session	2019-12-23 19:20:24 -05:00
byte[]	2d9b85d686	add csp, add global last button	2019-12-06 12:41:02 -05:00