Johannes Meyer ec40efe157 Only open trusted iframe sources by default ...

Trusted in this case means, it was Icinga Web that
rendered a link and the user followed it. Whether
a source is trustworthy or not is detected by use
of the user's session id to hash it combined with
the source similar to how CSRF tokens are assembled.

2025-03-26 10:25:31 +01:00

..

icinga

Only open trusted iframe sources by default

2025-03-26 10:25:31 +01:00

bootstrap.js

Remove inline scripts

2023-08-28 16:40:37 +02:00

define.js

define.js: Support libs that require exports

2021-05-17 13:20:42 +02:00

helpers.js

Revert "js: Don't serve scripts utilizing ECMA2016+ features"

2022-06-13 15:50:52 +02:00

icinga.js

js: Apply render hooks in a defined order

2024-08-07 11:20:11 +02:00

logout.js

Remove inline scripts

2023-08-28 16:40:37 +02:00