| commit | 34d50084e091513ce2f2a72cfd560eff99207ec5 | [log] [download] |
|---|---|---|
| author | Kamil Musin <kamilm@google.com> | Fri Dec 09 15:48:47 2022 +0100 |
| committer | Kamil Musin <kamilm@google.com> | Mon Dec 12 11:16:13 2022 +0100 |
| tree | 59a7b678f5cb7d4813667f7f97f2202ebe397185 | |
| parent | b07bdd9003b7a549fda5c913773d93861a4f545e [diff] |
Provide csp_nonce to Soy Templates The CSP nonce is only provided if available. If a filter is installed that attaches "nonce" attribute to request. For example in google deployment of gerrit we have such filter that sets nonce on all requests before they are processed by a servelet. CSP helps protects sites from XSS attacks. On Google hosts we set CSP headers that require all script elements to be accompanied by nonce (per request generated random string). Soy templates have a built in support for attaching nonce, as long as the value is provided using Inject Data mechanism. Google-Bud-Id: b/33429040 Release-Notes: skip Change-Id: Ifa3a07b8c77918a8a4ab48775b68e4f3b39bd3cb
Gitiles is a simple repository browser for Git repositories, built on JGit. Its guiding principle is simplicity: it has no formal access controls, no write access, no fancy Javascript, etc.
Gitiles automatically renders *.md Markdown files into HTML for simplified documentation. Refer to the Markdown documentation for details.
Gitiles is configurable in a git-style configuration file named gitiles.config. Refer to the configuration documentation for details.
Use the issue tracker at github to file bugs.
Please refer to the Developer Guide.