11 Commits

Author	SHA1	Message	Date
jvoisin	93c9d43497	http/response: get rid of the X-XSS-Protection header ... It's useless at best, dangerous at worst, and shouldn't be used anymore anywhere. See the following resources for details: - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection - https://chromestatus.com/feature/5021976655560704 - https://bugzilla.mozilla.org/show_bug.cgi?id=528661 - https://blogs.windows.com/windows-insider/2018/07/25/announcing-windows-10-insider-preview-build-17723-and-build-18204/	2024-03-24 13:45:38 -07:00
jvoisin	9df12177eb	Minor idiomatic pass on internal/http/request/context.go	2024-03-19 20:21:23 -07:00
Ole Bertram	698bea4ec8	Fix inaccessible metrics endpoint when listening on Unix socket	2023-12-06 19:52:33 -08:00
Florian Rüchel	62ef8ed57a	Add WebAuthn / Passkey integration ... This is a rebase of #1618 in which @dave-atx added WebAuthn support. Closes #1618	2023-11-05 18:57:35 +01:00
Frédéric Guillot	14e25ab9fe	Refactor HTTP Client and LocalizedError packages	2023-10-22 13:09:30 -07:00
Frédéric Guillot	4cc99881d8	Refactor Batch Builder and prevent accidental and excessive refreshes from the web ui	2023-10-20 16:07:18 -07:00
jinmiaoluo	fd69012357	Correct the timestamp format for Expires response header	2023-10-13 20:21:58 -07:00
Frédéric Guillot	67eb574fd4	Remove deprecated PreferServerCipherSuites	2023-10-05 20:27:44 -07:00
Frédéric Guillot	c0e954f19d	Implement structured logging using log/slog package	2023-09-24 22:37:33 -07:00
Frédéric Guillot	ff5d391701	Add OAuth2 PKCE support	2023-09-02 22:11:47 -07:00
Frédéric Guillot	168a870c02	Move internal packages to an internal folder ... For reference: https://go.dev/doc/go1.4#internalpackages	2023-08-10 20:29:34 -07:00