aboutsummaryrefslogtreecommitdiff
path: root/gnu/installer
diff options
context:
space:
mode:
authorRicardo Wurmus <rekado@elephly.net>2024-01-17 23:09:45 +0100
committerRicardo Wurmus <rekado@elephly.net>2024-01-17 23:09:45 +0100
commit612a24a7b88bdbd0a7cddb8eae3a945875839c84 (patch)
tree735040b1e0d9bae1ec7c8a1e82ff8e6c66e707af /gnu/installer
parent7f7ca62e27678306a2afae15b161a2f5cc08f03b (diff)
downloadguix-612a24a7b88bdbd0a7cddb8eae3a945875839c84.tar.gz
guix-612a24a7b88bdbd0a7cddb8eae3a945875839c84.zip
gnu: r-proj4: Update to 1.0-14.
* gnu/packages/cran.scm (r-proj4): Update to 1.0-14. Change-Id: I97575fc9f094b0e3cedb33dc83bbea286ed6c63d
Diffstat (limited to 'gnu/installer')
0 files changed, 0 insertions, 0 deletions
logsubject'>filter HTTP request headers to remove Hachette cookies in case they slip throughWojtek Kosior 2021-08-26improve signing\n\nSignature timestamp is now handled in a saner way. Sha256 ↵Wojtek Kosior implementation is no longer pulled in contexts that don't require it. 2021-08-23use StreamFilter under Mozilla to prevent csp <meta> tags from blocking our ↵Wojtek Kosior injected scripts 2021-08-20sanitize `<meta>' tags containing CSP rules under ChromiumWojtek Kosior This commit adds a mechanism of hijacking document when it loads and injecting sanitized nodes to the DOM from the level of content script. 2021-08-18remove unneeded policy-related cosole messages; restore IceCat 60 compatibilityWojtek Kosior 2021-08-18implement smuggling via cookies instead of URLWojtek Kosior 2021-08-18enhance our bundler to protect top-level `this' from accidental clobberingWojtek Kosior 2021-08-14merge facility to install from HydrillaWojtek Kosior 2021-08-14merge csp-PoCWojtek Kosior 2021-08-14Revert changes to content/main.js to commit 25817b68c*jahoti It turns out modifying the CSP headers in meta tags has no effect. 2021-08-10change default repository URLWojtek Kosior 2021-08-06Facilitate installation of scripts from the repositoryWojtek Kosior This commit includes: * removal of page_info_server * running of storage client in popup context * extraction of some common CSS to a separate file * extraction of scripts import view to a separate file * addition of a facility to conveniently clone complex structures from DOM (in DOM_helpers.js) * addition of hydrilla repo url to default settings * other minor changes and of course changes related to the actual installation of scripts from the repo 2021-08-05enable modularization of html filesWojtek Kosior 2021-08-04make settings_query.js use storage object passed as an argumentWojtek Kosior 2021-08-02[UNTESTED- will test] Add filtering for http-equiv CSP headersjahoti 2021-07-28Rationalize CSP violation report blocking.jahoti Report blocking now applies iff scripts are blocked. 2021-07-27validate settings on importWojtek Kosior 2021-07-26provide a facility to sanitize externally-obtained JSONWojtek Kosior 2021-07-26code maintenanceWojtek Kosior 2021-07-26Squash more CSP-filtering bugsjahoti On Firefox, original CSP headers are now smuggled (signed) in an x-orig-csp header to prevent re-processing issues with caching. Additionally, a default header is added for non-whitelisted domains in case there are no existing headers we can attach to. 2021-07-26Fix some bugs in the refined CSP handlingjahoti 2021-07-26[UNTESTED- will test] Use more nuanced CSP filteringjahoti CSP headers are now parsed and processed, rather than treated as simple units. This allows us to ensure policies delivered as HTTP headers do not interfere with our script filtering, as well as to preserve useful protections while removing the ones that could be problematic. Additionally, prefetching should now be blocked on pages where native scripts aren't allowed, and all reporting of CSP violations has been stripped (is this appropriate?). 2021-07-26Remove unnecessary imports of url_item and add a CSP header-parsing functionjahoti The parsing function isn't used yet; however, it will eventually be as a less destructive alternative to handling headers as indivisible units. 2021-07-23extract observables implementation from storage.jsWojtek Kosior