Dan Brown 92922288dd Added iframe CSP, improved session cookie security ... Added iframe CSP headers with configuration via .env. Updated session cookies to be lax by default, dynamically changing to none when iframes configured to allow third-party control. Updated cookie security to be auto-secure if a https APP_URL is set. Related to #2427 and #2207.		2021-01-02 02:43:50 +00:00
..
Controllers	Fixed short editor in firefox and optimised some queries	2021-01-02 01:22:41 +00:00
Middleware	Added iframe CSP, improved session cookie security	2021-01-02 02:43:50 +00:00
Requests	Change application namespace to BookStack	2015-09-10 19:31:09 +01:00
Kernel.php	Added iframe CSP, improved session cookie security	2021-01-02 02:43:50 +00:00
Request.php	Ran phpcbf and updated helpers typehinting	2019-09-15 18:29:51 +01:00