Jeremy Daer ab5964a375 Tune CSP: allow required external sources and user tools (#1977) ...

External sources:
- challenges.cloudflare.com for Turnstile (script-src, frame-src)
- storage.basecamp.com for Active Storage (connect-src)

User tools: loosen style/img/font/media/worker-src to avoid fighting
accessibility extensions, privacy tools, and custom fonts.

2025-12-05 20:45:48 -08:00

..

environments

Document deployment

2025-12-05 17:03:07 +00:00

initializers

Tune CSP: allow required external sources and user tools (#1977)

2025-12-05 20:45:48 -08:00

locales

New Rails app

2024-06-21 13:19:56 +01:00

application.rb

Make mission control only accessible for staff members

2025-11-28 15:53:58 +01:00

boot.rb

New Rails app

2024-06-21 13:19:56 +01:00

brakeman.ignore

Merge branch 'main' into sqlite

2025-11-21 15:23:34 +00:00

cable.yml

Configure a reading: connection for solid gems

2025-11-17 09:12:41 -05:00

cache.yml

Stick with the same general retention policy we use for everything

2025-11-21 09:40:50 +01:00

ci.rb

Remove MySQL from default local development setup

2025-12-01 12:46:37 +01:00

database.mysql.yml

Add production queue and cache database config

2025-12-04 09:50:45 +07:00

database.sqlite.yml

Updated database.sqlite.yml

2025-12-02 16:11:10 -05:00

database.yml

Make sure the sqlite db is prepared in SAAS mode

2025-11-29 14:09:55 -05:00

deploy.yml

Document deployment

2025-12-05 17:03:07 +00:00

environment.rb

New Rails app

2024-06-21 13:19:56 +01:00

importmap.rb

Use Turbo.fetch to prevent page refreshes bounces when using rails/requests

2025-11-03 14:46:22 +01:00

puma.rb

Move yabeda/prometheus stuff to the gem

2025-11-28 15:53:58 +01:00

queue.yml

Set queue.yml thread back to 3

2025-10-16 09:54:18 -04:00

recurring.yml

Add "data export" feature

2025-12-01 15:23:26 +00:00

routes.rb

Add verified_at timestamp to use for spam prevention

2025-12-05 21:51:44 -05:00

storage.oss.yml

Move active storage config to gem

2025-11-28 15:53:58 +01:00

storage.yml

require_relative doesn't work as expected in ERB templates

2025-11-28 13:39:47 -05:00