b01dce2a6e
* Allow render HTML with css/js external links * Fix bug because of filename escape chars * Fix lint * Update docs about new configuration item * Fix bug of render HTML in sub directory * Add CSP head for displaying iframe in rendering file * Fix test * Apply suggestions from code review Co-authored-by: delvh <dev.lh@web.de> * Some improvements * some improvement * revert change in SanitizerDisabled of external renderer * Add sandbox for iframe and support allow-scripts and allow-same-origin * refactor * fix * fix lint * fine tune * use single option RENDER_CONTENT_MODE, use sandbox=allow-scripts * fine tune CSP * Apply suggestions from code review Co-authored-by: wxiaoguang <wxiaoguang@gmail.com> Co-authored-by: delvh <dev.lh@web.de> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com> |
||
|---|---|---|
| .. | ||
| attachment.go | ||
| cache.go | ||
| cors.go | ||
| cron.go | ||
| cron_test.go | ||
| database.go | ||
| database_sqlite.go | ||
| database_test.go | ||
| directory.go | ||
| federation.go | ||
| git.go | ||
| i18n.go | ||
| indexer.go | ||
| indexer_test.go | ||
| lfs.go | ||
| log.go | ||
| mailer.go | ||
| markup.go | ||
| migrations.go | ||
| mime_type_map.go | ||
| mirror.go | ||
| oauth2_client.go | ||
| packages.go | ||
| picture.go | ||
| project.go | ||
| proxy.go | ||
| queue.go | ||
| repository.go | ||
| service.go | ||
| session.go | ||
| setting.go | ||
| setting_test.go | ||
| storage.go | ||
| storage_test.go | ||
| task.go | ||
| webhook.go | ||