moon/sync - sync - Moon's Git Server

Commit Graph

Author	SHA1	Message	Date
Calvin Montgomery	637bcad816	camo: include subdomains of whitelisted domains in whitelist	2017-07-08 20:46:42 -07:00
Calvin Montgomery	486ce04a3e	camo: support URL encoding option	2017-07-08 19:21:14 -07:00
Calvin Montgomery	22a9acfc90	Support proxying chat images via camo Camo: https://github.com/atmos/camo. This has a couple advantages over just allowing images to be dumped as-is: - Prevents mixed-content warnings by allowing the server to proxy HTTP images to an HTTPS camo instance - Protects users' privacy by not exposing their browser directly to the image host - Allows the camo proxy to intercept and reject bad image sources (URLs that are not actually images, gigapixel-sized images likely to DoS users' browsers, etc.) Whitelisting specific domains is supported for cases where the source is known to be trustworthy.	2017-05-28 19:38:43 -07:00

Author

SHA1

Message

Date

Calvin Montgomery

637bcad816

camo: include subdomains of whitelisted domains in whitelist

2017-07-08 20:46:42 -07:00

Calvin Montgomery

486ce04a3e

camo: support URL encoding option

2017-07-08 19:21:14 -07:00

Calvin Montgomery

22a9acfc90

Support proxying chat images via camo

Camo: https://github.com/atmos/camo.  This has a couple advantages over
just allowing images to be dumped as-is:

  - Prevents mixed-content warnings by allowing the server to proxy HTTP
    images to an HTTPS camo instance
  - Protects users' privacy by not exposing their browser directly to
    the image host
  - Allows the camo proxy to intercept and reject bad image sources
    (URLs that are not actually images, gigapixel-sized images likely to
    DoS users' browsers, etc.)

Whitelisting specific domains is supported for cases where the source is
known to be trustworthy.

2017-05-28 19:38:43 -07:00

3 Commits