Peter Müller eb6d71514a prevent loading resources from external sites ...

Make Apache transmit a CSP (Content Security Policy) header
for WebUI and Captive Portal contents.

This prevents some XSS and content injection attacks, especially
in case no transport encryption (Captive Portal!) can be used.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

2017-12-16 12:18:39 +00:00

config

prevent loading resources from external sites

2017-12-16 12:18:39 +00:00

doc

IPsec: Allow configuring inactivity timeout when in on-demand mode

2017-12-04 17:31:53 +00:00

html

mark 3DES and 1024 bit DH params as weak

2017-12-14 17:46:13 +00:00

langs

update german translations

2017-12-14 16:45:51 +00:00

lfs

Drop nagiosql

2017-12-14 17:48:24 +00:00

src

Drop nagiosql

2017-12-14 17:48:24 +00:00

tools

English is the reference language

2017-11-29 12:15:41 +00:00

.gitignore

Buildsystem: generate image md5sums.

2011-01-01 11:40:19 +01:00

.mailmap

Add .mailmap.

2010-01-22 11:37:55 +01:00

make.sh

Drop nagiosql

2017-12-14 17:48:24 +00:00

Description

No description provided

101 MiB

Languages

Perl 70.4%

Shell 23%

C 4%

Python 0.6%

Makefile 0.5%

Other 1.4%