Koha-clms/debian/templates
Martin Renvoize 47a28d62f9
Bug 38365: Integrate CSP middleware into Plack apps
Add Koha::Middleware::ContentSecurityPolicy to the middleware chain
in both app.psgi and the Debian plack.psgi template.

Without this integration, the CSP feature would not work - the
middleware was created but never activated. This adds it to:
- app.psgi (development/git install)
- debian/templates/plack.psgi (opac, intranet, and intranet_svc mounts)

Signed-off-by: David Cook <dcook@prosentient.com.au>
Signed-off-by: Lari Taskula <lari.taskula@hypernova.fi>
Signed-off-by: David Cook <dcook@prosentient.com.au>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
2026-03-16 11:57:12 +01:00
..
SIPconfig.xml Bug 37893: Add warning notes to obsolete xml file sections 2025-11-18 11:21:06 -07:00
apache-shared-disable.conf
…
apache-shared-intranet-plack.conf Bug 37056: Mount a new intranet_svc api to avoid redirects 2024-07-02 17:20:37 +02:00
apache-shared-intranet.conf Bug 40993: (QA follow-up) use L flag to stop the rewrite after PT action 2026-01-12 10:53:37 -07:00
apache-shared-opac-antibot.conf Bug 39906: (QA follow-up) Feature needs to be enabled specifically 2025-08-29 10:43:43 -06:00
apache-shared-opac-plack.conf Bug 39906: Add a simple quick Apache-level bot challenge 2025-08-29 10:43:42 -06:00
apache-shared-opac.conf Bug 25548: Remove Apache rewrite directives that trigger redirects 2020-11-20 14:23:52 +01:00
apache-shared.conf Bug 36531: Serve text/javascript compressed, like application/javascript is 2024-04-08 15:41:12 +02:00
apache-site-https.conf.in Bug 34193: SSLProtocol enable in use versions and disable deprecated versions 2023-08-18 10:29:21 +03:00
apache-site.conf.in Bug 18670: Remove RewriteLog and RewriteLogLevel from sample config files 2020-05-05 10:59:03 +01:00
koha-common.conf Bug 10942: (follow-up) debconfing the update option 2014-04-24 12:49:32 +00:00
koha-conf-site.xml.in Bug 38365: Add "style-src-attr 'unsafe-inline';" to default policy 2026-03-16 11:57:11 +01:00
koha-core.conf Bug 26672: Add additional koha-core and koha-full files to ./debian 2020-11-25 16:18:03 +01:00
koha-sites.conf Bug 18984: Remove NORMARC support 2021-10-07 15:36:40 +02:00
koha-worker@.service Bug 32992: Move background_jobs_worker to misc/workers 2023-02-24 17:52:19 -03:00
log4perl-site.conf.in Bug 36954: (follow-up) Return to the two logfiles pattern 2025-02-18 10:55:27 +01:00
marc21-retrieval-info-auth-dom.xml Bug 27198: Fix syntax in marc21-retrieval-info-auth-dom.xml 2024-04-05 11:51:14 +02:00
marc21-retrieval-info-bib-dom.xml Bug 17871: (followup) Remove zebra::* from the packages templates 2017-02-07 17:50:42 +00:00
plack.psgi Bug 38365: Integrate CSP middleware into Plack apps 2026-03-16 11:57:12 +01:00
unimarc-retrieval-info-auth-dom.xml
…
unimarc-retrieval-info-bib-dom.xml Bug 17871: (followup) Remove zebra::* from the packages templates 2017-02-07 17:50:42 +00:00
zebra-authorities-dom-site.cfg.in Bug 40304: Zebrasrv configs now work on ARM CPUs 2025-07-18 11:09:55 -06:00
zebra-biblios-dom-site.cfg.in Bug 40304: Zebrasrv configs now work on ARM CPUs 2025-07-18 11:09:55 -06:00
zebra.passwd.in
…