Frédéric Guillot
dd3f496d06
Avoid extra HTTP request for fetching custom stylesheet
...
Use inline CSS with a nonce and move CSP headers to a meta tag.
2021-05-31 14:29:33 -07:00
Frédéric Guillot
091308787b
Add header "Referrer-Policy: no-referrer"
...
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
2021-02-14 11:33:31 -08:00
Frédéric Guillot
864dd9f219
Allow images with data URLs
...
Only URLs with a mime-type image/* are allowed
2021-02-06 14:46:01 -08:00
Savely Krasovsky
454eb590ce
Remove child-src CSP policy (deprecated)
2020-03-31 19:50:25 -07:00
Peter De Wachter
937492f6f5
Do not buffer responses in the image proxy
...
The image proxy buffered the whole image before sending it to the
browser. If the image is large and/or hosted on a slow server, this
caused a long delay before the user's browser could display anything.
2019-09-10 20:43:44 -07:00
Frédéric Guillot
1f58b37a5e
Refactor HTTP response builder
2018-10-08 15:31:58 -07:00
