19 Commits

Author SHA1 Message Date
72884ee715
Remove CSP for now, will not work because of react bug 2023-10-19 16:50:24 -04:00
2fc6a521c3
Set nonces for inline scripts 2023-10-19 16:50:23 -04:00
f97ce959df
Set style nonce in top-level middleware 2023-10-19 16:50:22 -04:00
11d53d8c10
Fix CSP 2023-10-19 16:50:22 -04:00
026d1ca06d
New formatting 2023-10-19 16:50:21 -04:00
4c662cbe51
Update security headers 2023-10-19 16:50:20 -04:00
b5135ce6bf
Add additional security headers 2023-10-19 16:50:13 -04:00
969fab85ba
Check for invalid theme values in middleware 2023-10-19 16:50:05 -04:00
f6b57f2343
Remove old cookie from client if provided 2023-10-19 16:50:04 -04:00
4bf1609b24
Fix theme cookie parsing 2023-10-19 16:49:56 -04:00
07e810156f
Set theme in middleware 2023-10-19 16:49:48 -04:00
106cedec77
Add content-type enforcement bypass for new infraction endpoint 2023-10-19 16:49:48 -04:00
c7945de0ac
New RTV value 2023-10-19 16:49:45 -04:00
c97029e510
Remove CSP 2023-10-19 16:49:35 -04:00
0807f51d6c
Create and pass nonce value through middleware 2023-10-19 16:49:34 -04:00
2db6acaf1c
Remove useless frame options header 2023-10-19 16:49:29 -04:00
fb4be4cc44
Add CSP to potentially fix turnstile on safari 2023-10-19 16:49:27 -04:00
04dcbb4181
Remix migration 2023-10-19 16:49:09 -04:00
d731041378
Initial commit 2023-10-19 16:49:05 -04:00