mirror of
https://github.com/argoproj/argo-cd
synced 2026-04-21 17:07:16 +00:00
* fix: Add Content-Security-Policy configuration This should finish up the work on issue #2706 by adding a configurable Content-Security-Policy header which defaults to frame-ancestors 'self'; This matches what we do with X-Frame-Options=sameorigin some reference information found here https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors Signed-off-by: zachaller <zachaller@hotmail.com> * Run codegen Signed-off-by: zachaller <zachaller@hotmail.com> * fix: add ARGOCD_SERVER_CONTENT_SECURITY_POLICY env var to be configured via configmap Signed-off-by: zachaller <zachaller@hotmail.com> |
||
|---|---|---|
| .. | ||
| argocd_server.go | ||
| common.go | ||