Johannes Meyer 673998bb9a Only open trusted iframe sources by default ...

Trusted in this case means, it was Icinga Web that
rendered a link and the user followed it. Whether
a source is trustworthy or not is detected by use
of the user's session id to hash it combined with
the source similar to how CSRF tokens are assembled.

(cherry picked from commit ec40efe1578c3c9cb445638f78e76a940a6864cf)

2025-03-26 10:26:57 +01:00

..

icinga

Only open trusted iframe sources by default

2025-03-26 10:26:57 +01:00

define.js

define.js: Support libs that require exports

2021-05-17 13:20:42 +02:00

helpers.js

Revert "js: Don't serve scripts utilizing ECMA2016+ features"

2022-06-13 15:50:52 +02:00

icinga.js

js: Fix regression for loading dependent modules for sub-containers (#4533)

2021-11-08 13:16:06 +01:00