Sheogorath 450262c4ab

Allow embedding of video and audio tags ...

Adding mediaSrc to CSP so video and audio files can be embedded without
problems.

From a security perspective it should be fine to load audio and video
data without introducing a high security issue. Only from a privacy
perspective it allows another way to track users if there are data
embedded. But it doesn't introduce any new attack vector as pictures are
also allowed from everywhere.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

2018-03-25 20:51:56 +02:00

..

config

Change config to camel case with backwards compatibility

2018-03-25 19:08:14 +02:00

migrations

Add missing migration for permissions

2018-03-06 16:31:41 +01:00

models

Change config to camel case with backwards compatibility

2018-03-25 19:08:14 +02:00

ot

Change config to camel case with backwards compatibility

2018-03-25 19:08:14 +02:00

web

Change config to camel case with backwards compatibility

2018-03-25 19:08:14 +02:00

workers

refactor: Remove require extension filename

2017-05-08 19:29:06 +08:00

csp.js

Allow embedding of video and audio tags

2018-03-25 20:51:56 +02:00

history.js

Improve history migration performance

2018-03-10 16:51:00 +08:00

letter-avatars.js

Use strict mode in all backend files

2017-03-14 13:02:43 +08:00

logger.js

refactor(logger): Refactor logger.js

2017-05-08 19:24:37 +08:00

realtime.js

Change config to camel case with backwards compatibility

2018-03-25 19:08:14 +02:00

response.js

Change config to camel case with backwards compatibility

2018-03-25 19:08:14 +02:00

utils.js

switch to __dirname

2017-06-02 11:34:35 +01:00