Discource-C
/
discourse
mirror of https://github.com/discourse/discourse.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
discourse/public
History
Gina Haeussge f0fc38418c FEATURE: Support referrerPolicy on embed iframe 
This commit adds a new property "discourseReferrerPolicy" to the
set of supported configuration properties for the comment embed
script. If provided the value will be used to set the "referrerPolicy"
attribute on the iframe created to display the comments. This in turn
will allow embedding pages to define a more lenient referer policy on
the embed iframe for pages whose default policy is so strict it
keeps the comment embed from working.

Example:

  * Setup:
    * Discourse hosted at discourse.example.com
    * Comments embedded at example.com
    * Referrer-Policy at example.com set to 'same-origin'
  * Without this commit:
    * Loading the comments fails due to the referer being empty
  * With this commit and no adjusted configuration:
    * Loading the comments fails due to the referer being empty
      (= same behaviour as without the commit)
  * With this commit and DiscourseEmbed.discourseReferrerPolicy =
    'no-referrer-when-downgrade' as additional configuration:
    * Loading the comments succeeds

Note that this change is of special interest for embedding pages
wanting to restrict data flows under the terms of the GDPR since
it allows selectively whitelisting comment embeds while preventing
referer leaking by default.
 		2018-06-25 14:59:34 +10:00
..
images Revert "add a few emoji aliases" 2018-05-01 11:04:26 +02:00
javascripts FEATURE: Support referrerPolicy on embed iframe 2018-06-25 14:59:34 +10:00
403.ar.html Update translations. 2017-07-20 14:57:02 +05:30
403.bg.html FEATURE: Add Bulgarian language 2018-05-29 21:07:17 +02:00
403.bs_BA.html Update translations. 2017-07-20 14:57:02 +05:30
403.ca.html FEATURE: Catalan Translations (#5404) 2017-12-07 10:36:25 +01:00
403.cs.html Update translations 2017-12-06 10:25:12 -05:00
403.da.html Update translations. 2017-07-20 14:57:02 +05:30
403.de.html Update translations. 2017-07-20 14:57:02 +05:30
403.el.html Update translations. 2017-07-20 14:57:02 +05:30
403.es.html Update translations. 2017-07-20 14:57:02 +05:30
403.et.html Update translations. 2017-07-20 14:57:02 +05:30
403.fa_IR.html Update translations. 2017-07-20 14:57:02 +05:30
403.fi.html Update translations 2018-05-29 22:01:57 +02:00
403.fr.html Update translations. 2017-07-20 14:57:02 +05:30
403.gl.html Update translations. 2017-07-20 14:57:02 +05:30
403.he.html Update translations. 2017-07-20 14:57:02 +05:30
403.html Force UTF-8 charset in nginx error pages 2013-06-20 14:54:43 +04:00
403.id.html Update translations 2017-08-16 11:38:45 -04:00
403.it.html Update translations. 2017-07-20 14:57:02 +05:30
403.ja.html Update translations. 2017-07-20 14:57:02 +05:30
403.ko.html Update translations. 2017-07-20 14:57:02 +05:30
403.lv.html FEATURE: add Latvian language 2017-08-15 11:40:00 -04:00
403.nb_NO.html Update translations 2018-01-31 11:19:21 -05:00
403.nl.html Update translations. 2017-07-20 14:57:02 +05:30
403.pl_PL.html Update translations. 2017-07-20 14:57:02 +05:30
403.pt.html Update translations. 2017-07-20 14:57:02 +05:30
403.pt_BR.html Update translations. 2017-07-20 14:57:02 +05:30
403.ro.html Update translations. 2017-07-20 14:57:02 +05:30
403.ru.html Update translations, except ur because of errors 2018-03-07 14:11:56 -05:00
403.sk.html Update translations. 2017-07-20 14:57:02 +05:30
403.sl.html Add Slovenian translations 2018-03-06 20:51:41 +01:00
403.sq.html Update translations. 2017-07-20 14:57:02 +05:30
403.sr.html FEATURE: Serbian translation (#5443) 2017-12-19 12:26:06 +01:00
403.sv.html Update translations. 2017-07-20 14:57:02 +05:30
403.te.html Update translations. 2017-07-20 14:57:02 +05:30
403.th.html FEATURE: add Thai language 2017-08-25 12:33:09 -04:00
403.tr_TR.html Update translations. 2017-07-20 14:57:02 +05:30
403.uk.html Update translations. 2017-07-20 14:57:02 +05:30
403.ur.html Update translations. 2017-07-20 14:57:02 +05:30
403.vi.html Update translations. 2017-07-20 14:57:02 +05:30
403.zh_CN.html Update translations. 2017-07-20 14:57:02 +05:30
403.zh_TW.html Update translations. 2017-07-20 14:57:02 +05:30
404.json
…
422.ar.html Update translations. 2017-07-20 14:57:02 +05:30
422.bg.html FEATURE: Add Bulgarian language 2018-05-29 21:07:17 +02:00
422.bs_BA.html Update translations. 2017-07-20 14:57:02 +05:30
422.ca.html FEATURE: Catalan Translations (#5404) 2017-12-07 10:36:25 +01:00
422.cs.html Update translations 2017-12-06 10:25:12 -05:00
422.da.html Update translations. 2017-07-20 14:57:02 +05:30
422.de.html Update translations. 2017-07-20 14:57:02 +05:30
422.el.html Update translations. 2017-07-20 14:57:02 +05:30
422.es.html Update translations. 2017-07-20 14:57:02 +05:30
422.et.html Update translations. 2017-07-20 14:57:02 +05:30
422.fa_IR.html Update translations. 2017-07-20 14:57:02 +05:30
422.fi.html Update translations. 2017-07-20 14:57:02 +05:30
422.fr.html Update translations. 2017-07-20 14:57:02 +05:30
422.gl.html Update translations. 2017-07-20 14:57:02 +05:30
422.he.html Update translations. 2017-07-20 14:57:02 +05:30
422.html Force UTF-8 charset in nginx error pages 2013-06-20 14:54:43 +04:00
422.id.html Update translations 2017-08-16 11:38:45 -04:00
422.it.html Update translations. 2017-07-20 14:57:02 +05:30
422.ja.html Update translations. 2017-07-20 14:57:02 +05:30
422.ko.html Update translations. 2017-07-20 14:57:02 +05:30
422.lv.html FEATURE: add Latvian language 2017-08-15 11:40:00 -04:00
422.nb_NO.html Update translations. 2017-07-20 14:57:02 +05:30
422.nl.html Update translations. 2017-07-20 14:57:02 +05:30
422.pl_PL.html Update translations. 2017-07-20 14:57:02 +05:30
422.pt.html Update translations. 2017-07-20 14:57:02 +05:30
422.pt_BR.html Update translations. 2017-07-20 14:57:02 +05:30
422.ro.html Update translations. 2017-07-20 14:57:02 +05:30
422.ru.html Update translations. 2017-07-20 14:57:02 +05:30
422.sk.html Update translations. 2017-07-20 14:57:02 +05:30
422.sl.html Add Slovenian translations 2018-03-06 20:51:41 +01:00
422.sq.html Update translations. 2017-07-20 14:57:02 +05:30
422.sr.html FEATURE: Serbian translation (#5443) 2017-12-19 12:26:06 +01:00
422.sv.html Update translations. 2017-07-20 14:57:02 +05:30
422.te.html Update translations. 2017-07-20 14:57:02 +05:30
422.th.html FEATURE: add Thai language 2017-08-25 12:33:09 -04:00
422.tr_TR.html Update translations. 2017-07-20 14:57:02 +05:30
422.uk.html Update translations. 2017-07-20 14:57:02 +05:30
422.ur.html Update translations. 2017-07-20 14:57:02 +05:30
422.vi.html Update translations. 2017-07-20 14:57:02 +05:30
422.zh_CN.html Update translations. 2017-07-20 14:57:02 +05:30
422.zh_TW.html Update translations. 2017-07-20 14:57:02 +05:30
500.ar.html Update translations 2017-12-06 10:25:12 -05:00
500.bg.html FEATURE: Add Bulgarian language 2018-05-29 21:07:17 +02:00
500.bs_BA.html Update translations. 2017-07-20 14:57:02 +05:30
500.ca.html FEATURE: Catalan Translations (#5404) 2017-12-07 10:36:25 +01:00
500.cs.html Update translations 2018-02-15 16:36:03 -05:00
500.da.html Update translations. 2017-07-20 14:57:02 +05:30
500.de.html Update translations. 2017-07-20 14:57:02 +05:30
500.el.html Update translations. 2017-07-20 14:57:02 +05:30
500.es.html Update translations. 2017-07-20 14:57:02 +05:30
500.et.html Update translations. 2017-07-20 14:57:02 +05:30
500.fa_IR.html Update translations. 2017-07-20 14:57:02 +05:30
500.fi.html Update translations 2017-12-06 10:25:12 -05:00
500.fr.html Update translations. 2017-07-20 14:57:02 +05:30
500.gl.html Update translations 2017-12-06 10:25:12 -05:00
500.he.html Update translations. 2017-07-20 14:57:02 +05:30
500.html FIX: remove link from 500.html since it often won't work, and update copy to not mention meta category name 2016-07-08 14:15:13 -04:00
500.id.html Update translations 2017-08-16 11:38:45 -04:00
500.it.html Update translations. 2017-07-20 14:57:02 +05:30
500.ja.html Update translations. 2017-07-20 14:57:02 +05:30
500.ko.html Update translations. 2017-07-20 14:57:02 +05:30
500.lv.html FEATURE: add Latvian language 2017-08-15 11:40:00 -04:00
500.nb_NO.html Update translations 2018-05-29 22:01:57 +02:00
500.nl.html Update translations. 2017-07-20 14:57:02 +05:30
500.pl_PL.html Update translations. 2017-07-20 14:57:02 +05:30
500.pt.html Update translations. 2017-07-20 14:57:02 +05:30
500.pt_BR.html Update translations. 2017-07-20 14:57:02 +05:30
500.ro.html Update translations. 2017-07-20 14:57:02 +05:30
500.ru.html Update translations. 2017-07-20 14:57:02 +05:30
500.sk.html Update translations. 2017-07-20 14:57:02 +05:30
500.sl.html Add Slovenian translations 2018-03-06 20:51:41 +01:00
500.sq.html Update translations. 2017-07-20 14:57:02 +05:30
500.sr.html FEATURE: Serbian translation (#5443) 2017-12-19 12:26:06 +01:00
500.sv.html Update translations. 2017-07-20 14:57:02 +05:30
500.te.html Update translations. 2017-07-20 14:57:02 +05:30
500.th.html FEATURE: add Thai language 2017-08-25 12:33:09 -04:00
500.tr_TR.html Update translations. 2017-07-20 14:57:02 +05:30
500.uk.html Update translations. 2017-07-20 14:57:02 +05:30
500.ur.html Update translations. 2017-07-20 14:57:02 +05:30
500.vi.html Update translations. 2017-07-20 14:57:02 +05:30
500.zh_CN.html Update translations. 2017-07-20 14:57:02 +05:30
500.zh_TW.html Update translations. 2017-07-20 14:57:02 +05:30
503.ar.html Update translations 2017-12-06 10:25:12 -05:00
503.bg.html FEATURE: Add Bulgarian language 2018-05-29 21:07:17 +02:00
503.bs_BA.html Update translations. 2017-07-20 14:57:02 +05:30
503.ca.html FEATURE: Catalan Translations (#5404) 2017-12-07 10:36:25 +01:00
503.cs.html Update translations. 2017-07-20 14:57:02 +05:30
503.da.html Update translations. 2017-07-20 14:57:02 +05:30
503.de.html Update translations. 2017-07-20 14:57:02 +05:30
503.el.html Update translations. 2017-07-20 14:57:02 +05:30
503.es.html Update translations. 2017-07-20 14:57:02 +05:30
503.et.html Update translations. 2017-07-20 14:57:02 +05:30
503.fa_IR.html Update translations. 2017-07-20 14:57:02 +05:30
503.fi.html Update translations 2017-12-06 10:25:12 -05:00
503.fr.html Update translations. 2017-07-20 14:57:02 +05:30
503.gl.html Update translations. 2017-07-20 14:57:02 +05:30
503.he.html Update translations. 2017-07-20 14:57:02 +05:30
503.html Force UTF-8 charset in nginx error pages 2013-06-20 14:54:43 +04:00
503.id.html Update translations. 2017-07-20 14:57:02 +05:30
503.it.html Update translations. 2017-07-20 14:57:02 +05:30
503.ja.html Update translations. 2017-07-20 14:57:02 +05:30
503.ko.html Update translations. 2017-07-20 14:57:02 +05:30
503.lv.html FEATURE: add Latvian language 2017-08-15 11:40:00 -04:00
503.nb_NO.html Update translations. 2017-07-20 14:57:02 +05:30
503.nl.html Update translations. 2017-07-20 14:57:02 +05:30
503.pl_PL.html Update translations. 2017-07-20 14:57:02 +05:30
503.pt.html Update translations. 2017-07-20 14:57:02 +05:30
503.pt_BR.html Update translations. 2017-07-20 14:57:02 +05:30
503.ro.html Update translations. 2017-07-20 14:57:02 +05:30
503.ru.html Update translations. 2017-07-20 14:57:02 +05:30
503.sk.html Update translations. 2017-07-20 14:57:02 +05:30
503.sl.html Add Slovenian translations 2018-03-06 20:51:41 +01:00
503.sq.html Update translations. 2017-07-20 14:57:02 +05:30
503.sr.html FEATURE: Serbian translation (#5443) 2017-12-19 12:26:06 +01:00
503.sv.html Update translations. 2017-07-20 14:57:02 +05:30
503.te.html Update translations. 2017-07-20 14:57:02 +05:30
503.th.html FEATURE: add Thai language 2017-08-25 12:33:09 -04:00
503.tr_TR.html Update translations. 2017-07-20 14:57:02 +05:30
503.uk.html Update translations. 2017-07-20 14:57:02 +05:30
503.ur.html Update translations. 2017-07-20 14:57:02 +05:30
503.vi.html Update translations. 2017-07-20 14:57:02 +05:30
503.zh_CN.html Update translations. 2017-07-20 14:57:02 +05:30
503.zh_TW.html Update translations. 2017-07-20 14:57:02 +05:30