Lenin Alevski 26d5972ab5 Whitelist for preview files from the backend (#1651) ...

This PR adds a whitelist of safe files to download with
`Content-Disposition: inline;` from the backend, all other files will be
force download via `Content-Disposition: attachment;` existing svg files
will still be rendered in a secure way via the html `image` tag.

reference: https://digi.ninja/blog/svg_xss.php

Signed-off-by: Lenin Alevski <alevsk.8772@gmail.com>

2022-03-02 14:18:43 -06:00

..

auth

add header linter to avoid license header mistakes (#1414)

2022-01-25 10:48:49 -08:00

operations

Update encryption configuration screen for tenant (#1611)

2022-02-28 23:56:38 -08:00

config.go

Renamed marketplace functions (#1354)

2021-12-30 18:08:13 -08:00

configure_operator.go

Remove Operator UI Storage Page (#1639)

2022-03-01 00:58:20 -06:00

consts.go

Move Add Tenant Configure Audit Log and Monitoring to their own tabs (#1636)

2022-03-01 10:32:50 -08:00

doc.go

Split Operator and Management API into different Swagger files (#875)

2021-07-19 11:48:50 -07:00

embedded_spec.go

Update encryption configuration screen for tenant (#1611)

2022-02-28 23:56:38 -08:00

error.go

Update encryption configuration screen for tenant (#1611)

2022-02-28 23:56:38 -08:00

integrations.go

Split Operator and Management API into different Swagger files (#875)

2021-07-19 11:48:50 -07:00

k8s_client.go

add header linter to avoid license header mistakes (#1414)

2022-01-25 10:48:49 -08:00

logs.go

Split Operator and Management API into different Swagger files (#875)

2021-07-19 11:48:50 -07:00

minio_operator_mock.go

Split Operator and Management API into different Swagger files (#875)

2021-07-19 11:48:50 -07:00

operator_client.go

add header linter to avoid license header mistakes (#1414)

2022-01-25 10:48:49 -08:00

operator_login.go

Fix Hop hiding menu (#1621)

2022-02-24 13:24:29 -08:00

operator_logout.go

Implement logout endpoint for operator-ui (#1144)

2021-10-25 14:17:03 -05:00

operator_namespaces_test.go

Split Operator and Management API into different Swagger files (#875)

2021-07-19 11:48:50 -07:00

operator_namespaces.go

add header linter to avoid license header mistakes (#1414)

2022-01-25 10:48:49 -08:00

operator_nodes_test.go

Split Operator and Management API into different Swagger files (#875)

2021-07-19 11:48:50 -07:00

operator_nodes.go

Added CPU size selector & add tenant cleanup (#1326)

2021-12-17 10:29:10 -08:00

operator_parity_test.go

Split Operator and Management API into different Swagger files (#875)

2021-07-19 11:48:50 -07:00

operator_parity.go

Remove the last k8s import on restapi (#877)

2021-07-19 19:17:56 -05:00

operator_session.go

Renamed marketplace functions (#1354)

2021-12-30 18:08:13 -08:00

operator_tenant_add.go

Move Add Tenant Configure Audit Log and Monitoring to their own tabs (#1636)

2022-03-01 10:32:50 -08:00

operator_tenants_helper_test.go

Multiple fixes for operator-ui (#948)

2021-08-18 13:23:03 -07:00

operator_tenants_helper.go

Update encryption configuration screen for tenant (#1611)

2022-02-28 23:56:38 -08:00

operator_tenants_test.go

Fix Bug Deleting Tenant PVCs (#977)

2021-08-24 16:01:25 -07:00

operator_tenants.go

Move Add Tenant Configure Audit Log and Monitoring to their own tabs (#1636)

2022-03-01 10:32:50 -08:00

operator_volumes.go

add header linter to avoid license header mistakes (#1414)

2022-01-25 10:48:49 -08:00

proxy.go

Whitelist for preview files from the backend (#1651)

2022-03-02 14:18:43 -06:00

resource_quota_test.go

add header linter to avoid license header mistakes (#1414)

2022-01-25 10:48:49 -08:00

resource_quota.go

add header linter to avoid license header mistakes (#1414)

2022-01-25 10:48:49 -08:00

server.go

Update go-swagger and go-openapi dependencies (#1385)

2022-01-12 18:59:14 -08:00

utils.go

Use default storage class for postgre/prometheus if not user specified (#1359)

2022-01-03 16:29:27 -08:00