Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[feat] add CSP nonces to script/style tags #2394

Closed
wants to merge 41 commits into from
Closed

[feat] add CSP nonces to script/style tags #2394

wants to merge 41 commits into from

Commits on Dec 13, 2021

  1. Add nonce generation to request handling.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    bc57637 View commit details
    Browse the repository at this point in the history

  2. Changeset

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    c1f00ec View commit details
    Browse the repository at this point in the history

  3. [docs] document CSP Nonces.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    03cc653 View commit details
    Browse the repository at this point in the history

  4. Use CSP nonce generator shimmed by the adapter.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    6e723ed View commit details
    Browse the repository at this point in the history

  5. Add CspNonceGenerator shim to adapter-node.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    ed86bab View commit details
    Browse the repository at this point in the history

  6. Add CspNonceGenerator shim to dev.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    8003b51 View commit details
    Browse the repository at this point in the history

  7. Add typing for nonce generator.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    57ade88 View commit details
    Browse the repository at this point in the history

  8. Fix failing test case.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    e5c3f18 View commit details
    Browse the repository at this point in the history

  9. [docs] Apply suggestions from code review 

    Co-authored-by: Ben McCann <322311+benmccann@users.noreply.github.com>
    @Karlinator @benmccann
    Karlinator and benmccann committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    e886aed View commit details
    Browse the repository at this point in the history

  10. Add generateCspNonce shim to all adapters.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    dec6a4c View commit details
    Browse the repository at this point in the history

  11. Add changeset for adapters

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    a557b47 View commit details
    Browse the repository at this point in the history

  12. Fix deendency error in adapters.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    416d86e View commit details
    Browse the repository at this point in the history

  13. Add error handling for missing generateCspNonce.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    fc0fd83 View commit details
    Browse the repository at this point in the history

  14. Fix which tags get nonces.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    03579da View commit details
    Browse the repository at this point in the history

  15. Fix lint error.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    3d4ac9c View commit details
    Browse the repository at this point in the history

  16. [docs] fix syntax error in CSP code example.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    3ee9281 View commit details
    Browse the repository at this point in the history

  17. Change adapter nonce API to be more generic.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    7c137a1 View commit details
    Browse the repository at this point in the history

  18. [docs] Document adapter changes required by sveltejs#2394

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    c98de8a View commit details
    Browse the repository at this point in the history

  19. [docs] Improve CSP hook example.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    bcbda45 View commit details
    Browse the repository at this point in the history

  20. Fix injecting the shims.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    449a456 View commit details
    Browse the repository at this point in the history

  21. Change nonce to be generated/supplied by adapter

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    d873cac View commit details
    Browse the repository at this point in the history

  22. Add nonces to preview server

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    ecb23aa View commit details
    Browse the repository at this point in the history

  23. Fix test case

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    d906254 View commit details
    Browse the repository at this point in the history

  24. Update cahngeset message for adapters.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    c9c9736 View commit details
    Browse the repository at this point in the history

  25. Remove disused file.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    3a2b756 View commit details
    Browse the repository at this point in the history

  26. Implement suggestion from code review.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    8826933 View commit details
    Browse the repository at this point in the history

  27. [Docs] Suggestions from code review.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    18e08ca View commit details
    Browse the repository at this point in the history

  28. [docs] Update documentation/docs/14-content-security-policy.md 

    Co-authored-by: Ben McCann <322311+benmccann@users.noreply.github.com>
    @Karlinator @benmccann
    Karlinator and benmccann committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    9ff68e6 View commit details
    Browse the repository at this point in the history

  29. [docs] Apply suggestions from code review 

    Co-authored-by: Ben McCann <322311+benmccann@users.noreply.github.com>
    @Karlinator @benmccann
    Karlinator and benmccann committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    cd269ac View commit details
    Browse the repository at this point in the history

  30. Fix misnamed option.

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    449bd51 View commit details
    Browse the repository at this point in the history

  31. Disable prerendering if nonces are to be generated

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    4ec250f View commit details
    Browse the repository at this point in the history

  32. Fix adapter-node nonce generation

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    a13c758 View commit details
    Browse the repository at this point in the history

  33. Fix Cloudflare workers nonce generation

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    3899598 View commit details
    Browse the repository at this point in the history

  34. Fix netlify nonce generation

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    b2a35cc View commit details
    Browse the repository at this point in the history

  35. Fix Vercel adapter nonce generation

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    51a0ba1 View commit details
    Browse the repository at this point in the history

  36. [docs] clarify cspNonce disables prerendering

    @Karlinator
    Karlinator committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    eb081b6 View commit details
    Browse the repository at this point in the history

Commits on Jan 8, 2022

  1. Change adapter nonce API to be more generic.

    @Karlinator
    Karlinator committed Jan 8, 2022
    Configuration menu
    Copy the full SHA
    c81dc3a View commit details
    Browse the repository at this point in the history

  2. Fix injecting the shims.

    @Karlinator
    Karlinator committed Jan 8, 2022
    Configuration menu
    Copy the full SHA
    d5cc05b View commit details
    Browse the repository at this point in the history

  3. Change nonce to be generated/supplied by adapter

    @Karlinator
    Karlinator committed Jan 8, 2022
    Configuration menu
    Copy the full SHA
    a7b8003 View commit details
    Browse the repository at this point in the history

  4. Implement suggestion from code review.

    @Karlinator
    Karlinator committed Jan 8, 2022
    Configuration menu
    Copy the full SHA
    7e693d5 View commit details
    Browse the repository at this point in the history

  5. Add nonces to adapter-cloudflare.

    @Karlinator
    Karlinator committed Jan 8, 2022
    Configuration menu
    Copy the full SHA
    cf26271 View commit details
    Browse the repository at this point in the history