mirror of
https://github.com/fleetdm/fleet
synced 2026-05-20 15:38:39 +00:00
debb2d1790
Related to: #20296 Changes: - Added `ee/bulk-operations-dashboard`, a Sails.js app that lets users manage configuration profiles and scripts across multiple teams on a Fleet instance. - Added a Github workflow to deploy the app to Heroku - Added a Github workflow to test changes to the bulk operations dashboard.
49 lines
2.1 KiB
JavaScript
49 lines
2.1 KiB
JavaScript
/**
|
|
* Security Settings
|
|
* (sails.config.security)
|
|
*
|
|
* These settings affect aspects of your app's security, such
|
|
* as how it deals with cross-origin requests (CORS) and which
|
|
* routes require a CSRF token to be included with the request.
|
|
*
|
|
* For an overview of how Sails handles security, see:
|
|
* https://sailsjs.com/documentation/concepts/security
|
|
*
|
|
* For additional options and more information, see:
|
|
* https://sailsjs.com/config/security
|
|
*/
|
|
|
|
module.exports.security = {
|
|
|
|
/***************************************************************************
|
|
* *
|
|
* CORS is like a more modern version of JSONP-- it allows your application *
|
|
* to circumvent browsers' same-origin policy, so that the responses from *
|
|
* your Sails app hosted on one domain (e.g. example.com) can be received *
|
|
* in the client-side JavaScript code from a page you trust hosted on _some *
|
|
* other_ domain (e.g. trustedsite.net). *
|
|
* *
|
|
* For additional options and more information, see: *
|
|
* https://sailsjs.com/docs/concepts/security/cors *
|
|
* *
|
|
***************************************************************************/
|
|
|
|
// cors: {
|
|
// allRoutes: false,
|
|
// allowOrigins: '*',
|
|
// allowCredentials: false,
|
|
// },
|
|
|
|
|
|
/****************************************************************************
|
|
* *
|
|
* CSRF protection should be enabled for this application. *
|
|
* *
|
|
* For more information, see: *
|
|
* https://sailsjs.com/docs/concepts/security/csrf *
|
|
* *
|
|
****************************************************************************/
|
|
|
|
csrf: true
|
|
|
|
};
|