Граф коммитов

12 Коммитов

Автор SHA1 Сообщение Дата
Mavis Ou 53e567b858
Newsletter signup - POST to Basket directly (#1134)
Newsletter signup - POST to Basket directly
2019-08-19 13:06:28 -07:00
Mavis Ou d5d343a481
fixed more eslint errors (#1095) 2019-06-06 13:58:34 -07:00
Youri Wims f51a8d7277 testing csp 2019-05-30 12:03:37 -04:00
Mavis Ou a05c8e401d
Related to #704 - resolved Twitter related CSP errors (#947) 2018-05-02 10:27:49 -07:00
gavin lazar suntop d657889ff9
decoupling env (#901)
* basic loading of env vars into server and serialzing in json for client scraping

* refactoring env as module

* tweaked name and comment

* setting up separate server/client env modules

* handle client env running on server

* switching to new env imports

* cleanup

* eliminating index.html and associated tasks

* removing old comment
2018-01-11 10:18:06 -08:00
Mavis Ou 07a321cbe1 Bookmark entries with api (#610)
* Fixes #310 - bookmark entries with api

* tiny code improvement

* removed an extra new line

* updated some function names

* code cleanup - removed a bunch of repeated getNonce functions

* removed console.log

* removed console.log lines & changed some to console.error
2017-07-25 15:00:21 -07:00
Mavis Ou 9d6cd8cdbc Moderation page (#575)
* Fixes #541 - Moderation page

* code cleanup

* changed how moderation page shows and works by default

* code improvement

* thumbnails on moderation page should not be hyperlinks & show moderation navlink

* extracted ModerationPanel and Details to their own files

* changed border style

* thinner border
2017-07-11 15:24:10 -07:00
Mavis Ou b04d75c5a6 Fixes #159 - added Twitter share button 2017-05-16 12:41:33 -07:00
Mavis Ou 1b40d46e2f Fixes #462 - allow manifest.json to load (#463) 2017-04-06 09:25:54 -07:00
Christopher De Cairos f530fd1187
1. Fix https redirect that was being shorted by express.static
2. disable 'x-powered-by' header
3. fix hsts header
4. modify CSP to explicitly forbid framing
5. Add helmet.frameguard
2017-03-07 13:00:34 -05:00
Mavis Ou b391965841 updated script-src and img-src directives 2017-02-23 23:35:54 -08:00
Mavis Ou e152386eb5 moved security headers to its own file 2017-02-23 22:02:23 -08:00