10 commits

Author	SHA1	Message	Date
mhajas	f7e0af438d	KEYCLOAK-14232 Add Referrer-Policy: no-referrer to each response from Keycloak ... (cherry picked from commit 0b49640231abc6e465542bd2608e1c908c079ced)	2020-09-17 23:21:49 -07:00
stianst	90b29b0e31	KEYCLOAK-14107 Admin page content blocked on v10.0.0 due to content security policy	2020-05-29 13:57:38 +02:00
stianst	5b017e930d	KEYCLOAK-13128 Security Headers SPI and response filter	2020-04-28 15:28:24 +02:00
stianst	b8881b8ea0	KEYCLOAK-11728 New default hostname provider ... Co-authored-by: Hynek Mlnarik <hmlnarik@redhat.com>	2019-11-11 12:25:44 +01:00
Johannes Knutsen	c0b5c12dee	KEYCLOAK-8147: Add support for Content-Security-Policy-Report-Only response headers	2018-08-31 10:38:56 +02:00
Bruno Oliveira	4d762159ef	KEYCLOAK-5717	2017-10-24 10:55:02 -02:00
Bruno Oliveira da Silva	859cd30c3a	Include frame-ancestors for CSP 2 (#4413) ... Signed-off-by: Bruno Oliveira <bruno@abstractj.org>	2017-08-28 06:46:03 +02:00
Dominik Langenegger	8840bc073f	KEYCLOAK-4736 Extend security defenses with additional option to set the X-XSS-Protection header, block by default	2017-04-10 11:20:07 +02:00
Stian Thorgersen	eaf386f1d2	KEYCLOAK-4693 ... Improve blocking search indexing	2017-04-04 09:56:48 +02:00
Stian Thorgersen	7e33f4a7d1	KEYCLOAK-3882 Split server-spi into server-spi and server-spi-private	2016-11-10 13:28:42 +01:00

Renamed from server-spi/src/main/java/org/keycloak/models/BrowserSecurityHeaders.java (Browse further)