argo-cd/cmd/argocd-server/commands
Zach Aller e9fae0df37
fix: Add Content-Security-Policy configuration option (#8943)
* fix: Add Content-Security-Policy configuration

This should finish up the work on issue #2706 by adding a configurable
Content-Security-Policy header which defaults to frame-ancestors 'self';

This matches what we do with X-Frame-Options=sameorigin some reference information found
here https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors

Signed-off-by: zachaller <zachaller@hotmail.com>

* Run codegen

Signed-off-by: zachaller <zachaller@hotmail.com>

* fix: add ARGOCD_SERVER_CONTENT_SECURITY_POLICY env var to be configured via configmap

Signed-off-by: zachaller <zachaller@hotmail.com>
2022-03-31 14:48:35 -04:00
..
argocd_server.go fix: Add Content-Security-Policy configuration option (#8943) 2022-03-31 14:48:35 -04:00
common.go Rewrite installer. Install into argocd namespace. Standardize kubeconfig parsing 2018-03-02 18:04:29 -08:00