Chris 1a8fe19416 Fix/cors csp (#64) ...

* CORS/CSP fix

* deprecate ALLOWED_IFRAME_ORIGINS

* Revert "deprecate ALLOWED_IFRAME_ORIGINS"

This reverts commit 9792f06691.

* Reapply "deprecate ALLOWED_IFRAME_ORIGINS"

This reverts commit 683ee93036.

* Add helmet config and deprecate previous ALLOWED_IFRAME_ORIGINS

* add build to docker compose for local builds

* set server to listen on 0.0.0.0 and control with cors

* Remove hsts from helmet and apply new pin status check limits

* add back allowed_iframe_origins env as a fallback for allowed_origins

* update readme for allowed_iframe_origins

2025-06-20 15:07:56 -07:00

..

assets

Update icons to selfh.st icons

2025-05-13 08:10:47 -07:00

index.html

Fix/cors csp (#64)

2025-06-20 15:07:56 -07:00

login.html

Fix/cors csp (#64)

2025-06-20 15:07:56 -07:00

service-worker.js

Add PWA Registration

2025-03-12 14:00:38 -07:00

styles.css

feat: Complete Application Infrastructure and Security Overhaul (#28)

2025-02-16 15:39:13 -08:00