Jakob Ackermann 224edddad4 [web] set a default, strict CSP on ALL endpoints (#6271) ...

* Remove use of CSP_PERCENTAGE

* Move header calculation earlier

* Set a default policy and add comments

* Apply the CSP header to all responses

* Enable CSP in dev environment

* [web] set a default, strict CSP on ALL endpoints

* [misc] enable CSP in dev-env

* Only build the default policy once

* Update docker-compose.yml

* [web] webpack: set default CSP header on webpack assets

This aligns the webpack dev-server with production in nocdn=true mode.

Co-authored-by: Alf Eaton <alf.eaton@overleaf.com>
GitOrigin-RevId: 088a6082ad21c5b3f229887ba0ab3eca8d0528cd

2022-03-18 09:03:01 +00:00

..

settings.defaults.js

[web] set a default, strict CSP on ALL endpoints (#6271)

2022-03-18 09:03:01 +00:00