gitea-admin/gh-christianlouis-dmarq
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: show mail import history

Browse Source
This commit is contained in:
Christian Krakau-Louis
2026-05-22 19:44:18 +02:00
parent 40f7d52df2
commit 69aa1459eb
6 changed files with 145 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/app/middleware/security.py
+4 -2
View File
@@ -73,8 +73,10 @@ class SecurityHeadersMiddleware(BaseHTTPMiddleware):
# See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
csp_directives = [
"default-src 'self'",
# TODO: Remove 'unsafe-inline' - requires moving inline scripts to external files # pylint: disable=fixme
"script-src 'self' 'unsafe-inline'"
# TODO: Remove 'unsafe-inline' and 'unsafe-eval' - requires moving inline
# scripts to external files and replacing the standard Alpine CDN build
# with the CSP-compatible build. # pylint: disable=fixme
"script-src 'self' 'unsafe-inline' 'unsafe-eval'"
" https://cdn.tailwindcss.com https://cdn.jsdelivr.net",
# TODO: Remove 'unsafe-inline' - requires moving inline styles to CSS or using nonces # pylint: disable=fixme
"style-src 'self' 'unsafe-inline' https://fonts.googleapis.com"