112 Commits

Author	SHA1	Message	Date
Literallie	0cbdc852cb	CSP: Allow more content types	2017-10-22 00:03:45 +02:00
Literallie	5d2d3ec875	CSP: Upgrade insecure requests if possible ... Config option; default is to only upgrade if usessl	2017-10-22 00:03:45 +02:00
Literallie	ba183ce654	Add basic CSP support	2017-10-22 00:03:44 +02:00
Literallie	6bdc90d6ff	Add env vars for extra HSTS options	2017-10-13 01:42:05 +02:00
Literallie	1634d5c567	Add on/off env var for HSTS	2017-10-13 01:42:05 +02:00
Literallie	56411ca0e1	Make HSTS behaviour configurable; Fixes #584	2017-10-13 01:42:05 +02:00
Sheogorath	89c60d1331	Fix missing boolean setting for HMD_URL_ADDPORT ... Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>	2017-10-11 23:13:22 +02:00
Marc Deop	2c780f53df	Add support for minio	2017-08-30 18:58:34 +02:00
tkykm	bf3512f8f6	Read to correct tlsca file path	2017-06-01 19:58:55 +09:00
Raccoon Li	0c619fee91	fix(config): ssl environment configs not parse properly	2017-05-08 20:41:38 +08:00
Raccoon Li	826ad213d6	fix(config): some environment config not parse properly	2017-05-08 20:38:59 +08:00
BoHong Li	ecb0533605	refactor(config.js): Extract config file ... * Separate different config source to each files * Freeze config object	2017-05-08 19:29:07 +08:00