be15ba076d
Removed unnecessary duplicate static caching
9 years ago
d138755806
do a proper same-origin check
String prefix matching is hacky and provides insufficient checking if it
does not end with a /.
9 years ago
cd83f9f0eb
fix CSP referrer policy
The policy of "referrer none" was incorrect and was nonfunctional. With
this change, the CSP referrer policy is set to origin, which
will causes only the origin to be sent for requests made from the main
site.
A fix was also needed for referrer checks in two places.
9 years ago
a60a7cc9e6
Cache static files + Separate CSS more. Fixes #44
9 years ago
6e33fe6ac8
Metadata holds mimetype, sha256sum, archiveFiles
9 years ago
5e7e96af01
add support for some security headers
This commit adds support for Content-Security-Policy and
X-Frame-Options using the ContentSecurityPolicy middleware.
9 years ago
1e1c8caa53
Add /favicon.ico route
9 years ago
d40803f165
More verbose errors
9 years ago
52cc3b4dff
Add fastcgi support and static cache headers
9 years ago
ba73f4adf3
Fix static directory listing recursion
9 years ago
22818d86ce
Implement hotlink protection
9 years ago
51ccc2f6a4
Add delete method
9 years ago
c32a698cbc
upload expiry/barename respect, random fixes
9 years ago
a10b838f4d
Add preliminary metadata support
9 years ago
d98b63e8bd
Performance improvements, custom 404+500, -nologs, PUT uploads fix
9 years ago
2cf3f14477
Add basic video support
Additionally use filePath instead of absPath, and fileName instead of
filename.
9 years ago
c634317e2d
this file might be useful to add here
9 years ago
andreimarcu
mutantmonkey
Matt Hazinski
Jacob Melton