5 commits

Author	SHA1	Message	Date
Literallie	0cbdc852cb	CSP: Allow more content types	2017-10-22 00:03:45 +02:00
Literallie	5d2d3ec875	CSP: Upgrade insecure requests if possible ... Config option; default is to only upgrade if usessl	2017-10-22 00:03:45 +02:00
Literallie	ba183ce654	Add basic CSP support	2017-10-22 00:03:44 +02:00
Literallie	56411ca0e1	Make HSTS behaviour configurable; Fixes #584	2017-10-13 01:42:05 +02:00
BoHong Li	ecb0533605	refactor(config.js): Extract config file ... * Separate different config source to each files * Freeze config object	2017-05-08 19:29:07 +08:00