ghostguild-org/server/middleware
Jennie Robinson Faber fed1cc4bc7 Skip CSP on OIDC routes to fix logout form submission
The oidc-provider generates form actions with http:// URLs that
conflict with the CSP form-action directive. OIDC routes serve
self-contained HTML outside Nuxt, so CSP is not needed there.
2026-03-05 23:05:52 +00:00
..
01.csrf.js Add OIDC provider for Outline wiki SSO 2026-03-01 15:46:01 +00:00
02.security-headers.js Skip CSP on OIDC routes to fix logout form submission 2026-03-05 23:05:52 +00:00
03.rate-limit.js Implement OWASP ASVS L1 security remediation (Phases 0-2) 2026-03-01 12:53:18 +00:00