Ben Busby 9c96f0fd57 Improve default response headers ... Reponse headers now include the following: - X-Content-Type-Options: nosniff - X-Frame-Options: DENY - Strict-Transport-Security: max-age=63072000 - Only when HTTPS_ONLY is set https://infosec.mozilla.org/guidelines/web_security#http-strict-transport-security https://infosec.mozilla.org/guidelines/web_security#x-content-type-options https://infosec.mozilla.org/guidelines/web_security#x-frame-options		2021-11-26 08:38:26 -07:00
..
models	Use 'gl' search param to set country	2021-11-23 13:48:54 -07:00
static	Use 'gl' search param to set country	2021-11-23 13:48:54 -07:00
templates	Import logo stylesheet before applying custom css	2021-11-24 12:38:56 -07:00
utils	Fix incorrect redirect protocol used by Flask	2021-11-21 23:21:04 -07:00
__init__.py	Improve cookie security when HTTPS_ONLY is set	2021-11-20 16:34:37 -07:00
__main__.py	Swap out Flask's default web server for Waitress (#32)	2020-05-12 17:14:55 -06:00
filter.py	Improve public instance session management (#480)	2021-11-17 19:35:30 -07:00
request.py	Use 'gl' search param to set country	2021-11-23 13:48:54 -07:00
routes.py	Improve default response headers	2021-11-26 08:38:26 -07:00