Dan Brown 92922288dd Added iframe CSP, improved session cookie security ...

Added iframe CSP headers with configuration via .env.
Updated session cookies to be lax by default, dynamically changing to
none when iframes configured to allow third-party control.
Updated cookie security to be auto-secure if a https APP_URL is set.

Related to #2427 and #2207.

2021-01-02 02:43:50 +00:00

..

Controllers

Fixed short editor in firefox and optimised some queries

2021-01-02 01:22:41 +00:00

Middleware

Added iframe CSP, improved session cookie security

2021-01-02 02:43:50 +00:00

Requests

Change application namespace to BookStack

2015-09-10 19:31:09 +01:00

Kernel.php

Added iframe CSP, improved session cookie security

2021-01-02 02:43:50 +00:00

Request.php

Ran phpcbf and updated helpers typehinting

2019-09-15 18:29:51 +01:00