gotosocial/internal
Daenney 02d6e2e3bc
[feature] Set some security related headers (#3065)
* Set frame-ancestors in the CSP
   This ensures we can't be loaded/embedded in an iframe. It also sets the
   older X-Frame-Options for fallback.
* Disable MIME type sniffing
* Set Referrer-Policy
   This sets the policy such that browsers will never send the Referer
   header along with a request, unless it's a request to the same protocol,
   host/domain and port. Basically, only send it when navigating through
   our own UI, but not anything external.

   The default is strict-origin-when-cross-origin when unset, which sends
   the Referer header for requests unless it's going from HTTPS to HTTP
   (i.e a security downgrade, hence the 'strict').
2024-07-04 10:07:02 +02:00
..
ap [bugfix] Deref stats async, serve stub collections if handshaking (#2990) 2024-06-11 11:54:59 +02:00
api [chore] media and emoji refactoring (#3000) 2024-06-26 16:01:16 +01:00
cache [bugfix] Fix typo in instance cache copyF (#3052) 2024-06-28 16:43:00 +02:00
cleaner [chore] media and emoji refactoring (#3000) 2024-06-26 16:01:16 +01:00
config [chore] Warn about email/password change when using OIDC (#2975) 2024-06-07 15:21:57 +01:00
db [feature] Default to WASM-based SQLite driver (#3053) 2024-06-29 09:35:57 +02:00
email [bugfix] add Date and Message-ID headers for email (#3031) 2024-06-22 23:36:30 +02:00
federation [chore] media and emoji refactoring (#3000) 2024-06-26 16:01:16 +01:00
filter [feature] User muting (#2960) 2024-06-06 16:38:02 +00:00
gtscontext [bugfix] httpclient not signing subsequent redirect requests (#2798) 2024-04-02 13:12:26 +02:00
gtserror [experiment] add alternative wasm sqlite3 implementation available via build-tag (#2863) 2024-05-27 17:46:15 +02:00
gtsmodel [chore] Allow gtsmodel to depend on util (#3068) 2024-07-03 15:53:54 -07:00
headerfilter [feature] request blocking by http headers (#2409) 2023-12-18 14:18:25 +00:00
httpclient [feature] add worker task serialization logic (#2989) 2024-06-20 17:06:20 +00:00
id [chore] Improve copyright header handling (#1608) 2023-03-12 16:00:57 +01:00
iotools [performance] update storage backend and make use of seek syscall when available (#2924) 2024-05-22 11:46:24 +02:00
language [feature] Set/show instance language(s); show post language on frontend (#2362) 2023-11-17 11:35:28 +01:00
log [chore] Log less output on failed test (#2804) 2024-04-04 16:42:42 +01:00
media [chore] Allow gtsmodel to depend on util (#3068) 2024-07-03 15:53:54 -07:00
messages [feature] add worker task serialization logic (#2989) 2024-06-20 17:06:20 +00:00
metrics [chore] Update usage of OTEL libraries (#2725) 2024-03-11 15:34:34 +01:00
middleware [feature] Set some security related headers (#3065) 2024-07-04 10:07:02 +02:00
oauth [chore] Upgrade our Go version to 1.22 (#2862) 2024-04-26 10:40:29 +02:00
oidc [chore] Improve copyright header handling (#1608) 2023-03-12 16:00:57 +01:00
paging [bugfix] flaky paging test (#2888) 2024-05-01 13:29:42 +02:00
processing [chore] Allow gtsmodel to depend on util (#3068) 2024-07-03 15:53:54 -07:00
queue [performance] update go-structr and go-mutexes with memory usage improvements (#2909) 2024-05-13 08:05:46 +00:00
regexes [bugfix] use start + end line in regex when validating emoji via API (#2671) 2024-02-20 11:46:04 +01:00
router [chore] improved startup / shutdown (#2925) 2024-05-29 13:21:04 +02:00
scheduler [feature] add support for polls + receiving federated status edits (#2330) 2023-11-08 14:32:17 +00:00
state [bugfix] Lock when checking/creating notifs to avoid race (#2890) 2024-05-02 13:43:00 +01:00
storage [chore] media and emoji refactoring (#3000) 2024-06-26 16:01:16 +01:00
stream [feature] Implement filters_changed stream event (#2972) 2024-06-07 10:51:13 +02:00
text [bugfix] Parse links that contain non-ascii characters (#2762) 2024-03-15 17:26:53 +00:00
timeline feature: filters v2 server-side warning/hiding (#2793) 2024-05-06 12:49:08 +01:00
tracing [chore] Update usage of OTEL libraries (#2725) 2024-03-11 15:34:34 +01:00
trans [feature] New user sign-up via web page (#2796) 2024-04-11 11:45:53 +02:00
transport [feature] add worker task serialization logic (#2989) 2024-06-20 17:06:20 +00:00
typeutils [chore] media and emoji refactoring (#3000) 2024-06-26 16:01:16 +01:00
uris [feature] Process outgoing Move from clientAPI (#2750) 2024-03-13 13:53:29 +01:00
util [chore] Allow gtsmodel to depend on util (#3068) 2024-07-03 15:53:54 -07:00
validate [feature] Implement Filter API v2 (#2936) 2024-05-31 12:55:56 +02:00
web [chore] Update our robots.txt (#3033) 2024-06-23 15:34:21 +02:00
workers [chore] media and emoji refactoring (#3000) 2024-06-26 16:01:16 +01:00