Jeremy Daer 345f457513 Tune CSP for user extensions and close implicit-allow gaps (#1974) ...

Loosen font-src and add media-src to allow browser extensions like
accessibility fonts (OpenDyslexic) and user style managers to work
without CSP violations.

Add default-src and connect-src directives to close security gaps where
unspecified directives were implicitly allowing all sources.

2025-12-05 16:57:03 -08:00

..

environments

Document deployment

2025-12-05 17:03:07 +00:00

initializers

Tune CSP for user extensions and close implicit-allow gaps (#1974)

2025-12-05 16:57:03 -08:00

locales

New Rails app

2024-06-21 13:19:56 +01:00

application.rb

Make mission control only accessible for staff members

2025-11-28 15:53:58 +01:00

boot.rb

New Rails app

2024-06-21 13:19:56 +01:00

brakeman.ignore

Merge branch 'main' into sqlite

2025-11-21 15:23:34 +00:00

cable.yml

Configure a reading: connection for solid gems

2025-11-17 09:12:41 -05:00

cache.yml

Stick with the same general retention policy we use for everything

2025-11-21 09:40:50 +01:00

ci.rb

Remove MySQL from default local development setup

2025-12-01 12:46:37 +01:00

database.mysql.yml

Add production queue and cache database config

2025-12-04 09:50:45 +07:00

database.sqlite.yml

Updated database.sqlite.yml

2025-12-02 16:11:10 -05:00

database.yml

Make sure the sqlite db is prepared in SAAS mode

2025-11-29 14:09:55 -05:00

deploy.yml

Document deployment

2025-12-05 17:03:07 +00:00

environment.rb

New Rails app

2024-06-21 13:19:56 +01:00

importmap.rb

Use Turbo.fetch to prevent page refreshes bounces when using rails/requests

2025-11-03 14:46:22 +01:00

puma.rb

Move yabeda/prometheus stuff to the gem

2025-11-28 15:53:58 +01:00

queue.yml

Set queue.yml thread back to 3

2025-10-16 09:54:18 -04:00

recurring.yml

Add "data export" feature

2025-12-01 15:23:26 +00:00

routes.rb

Remove trailing whitespace

2025-12-04 13:32:47 +00:00

storage.oss.yml

Move active storage config to gem

2025-11-28 15:53:58 +01:00

storage.yml

require_relative doesn't work as expected in ERB templates

2025-11-28 13:39:47 -05:00