strapi/packages/strapi-generate-new/lib/resources/files/config/environments/development/security.json

{
  "csp": {
    "enabled": true,
    "policy": [
      {
        "img-src": "'self' http:"
      },
      "block-all-mixed-content"
    ]
  },
  "p3p": {
    "enabled": false,
    "value": ""
  },
  "hsts": {
    "enabled": true,
    "maxAge": 31536000,
    "includeSubDomains": true
  },
  "xframe": {
    "enabled": true,
    "value": "SAMEORIGIN"
  },
  "xss": {
    "enabled": true,
    "mode": "block"
  },
  "cors": {
    "enabled": true
  },
  "ip": {
    "enabled": false,
    "whiteList": [],
    "blackList": []
  }
}
Form multi repos to mono repo workflow 2016-03-18 11:12:50 +01:00			`{`
Update default configuration, and fix router for admin & plugins 2017-07-28 18:34:13 +02:00			`"csp": {`
Remove x-forwarded-host. - set security defaults for development mode that are standard - refactor error messages to work without ctx.request.admin - remove mask middleware and add a sanitization layer to the core-api to hide private fileds 2019-08-21 12:10:23 +02:00			`"enabled": true,`
			`"policy": [`
			`{`
			`"img-src": "'self' http:"`
			`},`
			`"block-all-mixed-content"`
			`]`
Update default configuration, and fix router for admin & plugins 2017-07-28 18:34:13 +02:00			`},`
			`"p3p": {`
Disable p3p by default 2019-09-20 12:45:31 +02:00			`"enabled": false,`
Update p3p xss csp and session config 2017-09-19 10:06:16 +02:00			`"value": ""`
Form multi repos to mono repo workflow 2016-03-18 11:12:50 +01:00			`},`
			`"hsts": {`
Remove x-forwarded-host. - set security defaults for development mode that are standard - refactor error messages to work without ctx.request.admin - remove mask middleware and add a sanitization layer to the core-api to hide private fileds 2019-08-21 12:10:23 +02:00			`"enabled": true,`
Form multi repos to mono repo workflow 2016-03-18 11:12:50 +01:00			`"maxAge": 31536000,`
			`"includeSubDomains": true`
			`},`
Update default configuration, and fix router for admin & plugins 2017-07-28 18:34:13 +02:00			`"xframe": {`
Remove x-forwarded-host. - set security defaults for development mode that are standard - refactor error messages to work without ctx.request.admin - remove mask middleware and add a sanitization layer to the core-api to hide private fileds 2019-08-21 12:10:23 +02:00			`"enabled": true,`
Update default configuration, and fix router for admin & plugins 2017-07-28 18:34:13 +02:00			`"value": "SAMEORIGIN"`
			`},`
			`"xss": {`
Remove x-forwarded-host. - set security defaults for development mode that are standard - refactor error messages to work without ctx.request.admin - remove mask middleware and add a sanitization layer to the core-api to hide private fileds 2019-08-21 12:10:23 +02:00			`"enabled": true,`
Update p3p xss csp and session config 2017-09-19 10:06:16 +02:00			`"mode": "block"`
Update default configuration, and fix router for admin & plugins 2017-07-28 18:34:13 +02:00			`},`
Form multi repos to mono repo workflow 2016-03-18 11:12:50 +01:00			`"cors": {`
Use koa-router and fix graphql-uploads 2019-08-21 11:05:33 +02:00			`"enabled": true`
Form multi repos to mono repo workflow 2016-03-18 11:12:50 +01:00			`},`
			`"ip": {`
Update dependencies and focus on performances 2017-08-05 20:25:57 +02:00			`"enabled": false,`
Form multi repos to mono repo workflow 2016-03-18 11:12:50 +01:00			`"whiteList": [],`
			`"blackList": []`
Update default configuration, and fix router for admin & plugins 2017-07-28 18:34:13 +02:00			`}`
Form multi repos to mono repo workflow 2016-03-18 11:12:50 +01:00			`}`