John van der Wulp 1d1a792043 Chagned CSP to allow only values via SetAllowedFormAction

2026-03-09 10:03:18 +01:00

..

api_key_auth.go

feat: add static api key env variable (#1229)

2026-01-11 15:36:27 +01:00

auth_middleware_test.go

fix: disallow API key renewal and creation with API key authentication (#1334)

2026-02-23 20:34:25 +01:00

auth_middleware.go

fix: disallow API key renewal and creation with API key authentication (#1334)

2026-02-23 20:34:25 +01:00

cache_control_test.go

feat: add Cache-Control: private, no-store to all API routes per default (#1126)

2025-11-30 18:29:35 +01:00

cache_control.go

feat: add Cache-Control: private, no-store to all API routes per default (#1126)

2025-11-30 18:29:35 +01:00

cors.go

fix: whitelist authorization header for CORS

2025-06-02 15:55:29 +02:00

csp_middleware.go

Chagned CSP to allow only values via SetAllowedFormAction

2026-03-09 10:03:18 +01:00

error_handler.go

feat: allow uppercase usernames (#958)

2025-09-17 14:43:12 -05:00

file_size_limit.go

refactor: fix code smells

2025-03-27 16:48:36 +01:00

head_middleware.go

feat: add HTTP HEAD method support (#1135)

2025-12-05 11:17:13 +01:00

jwt_auth.go

feat: disable/enable users (#437)

2025-04-18 15:38:50 +00:00

rate_limit.go

feat: add environment variable to disable built-in rate limiting

2026-01-11 14:26:30 +01:00