Alexandre Alapetite 8a776f1461 Prevent a target _blank attacks with window.opener ...

https://mathiasbynens.github.io/rel-noopener/
noopener is implied by noreferrer
https://html.spec.whatwg.org/multipage/semantics.html#link-type-noreferrer
The API for window.open() does not seem stable yet
https://bugzilla.mozilla.org/show_bug.cgi?id=1267339

2016-09-07 14:35:51 +02:00

..

api

HTTP security: prevent reflection abuse

2016-08-29 09:44:18 +02:00

i

New configuration system (not working yet)

2015-01-05 16:54:16 +01:00

scripts

Prevent a target _blank attacks with window.opener

2016-09-07 14:35:51 +02:00

themes

Change style for podcast download

2016-09-04 17:05:10 +02:00

.htaccess

CSP for SVG

2016-03-08 18:20:14 +01:00

ext.php

Fix security hole from ext.php script.

2014-12-05 10:54:44 +01:00

f.php

Adjust caching for favicon with errors

2016-04-23 21:48:37 +02:00

favicon.ico

icon.svg réécrit à la main + favicon fond cercle blanc

2014-01-25 01:40:55 +01:00

index.html

CSP compatibility for home page

2016-03-17 21:09:34 +01:00

robots.txt

Cookie : sous-répertoire pour index (changements de répertoires !)

2013-12-26 01:56:58 +01:00

Web.config

Début de support de IIS

2014-01-03 22:54:25 +01:00