Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add Security Module (Lombiq Technologies: OCORE-91) #11538

Merged
merged 108 commits into from
May 20, 2022
Merged

Add Security Module (Lombiq Technologies: OCORE-91) #11538

merged 108 commits into from
May 20, 2022

Commits on Apr 13, 2022

  1. Add OrchardCore.Security module

    @hishamco
    hishamco committed Apr 13, 2022
    Configuration menu
    Copy the full SHA
    b5bec6a View commit details
    Browse the repository at this point in the history

Commits on Apr 14, 2022

  1. Add ReferrerPolicyMiddleware

    @hishamco
    hishamco committed Apr 14, 2022
    Configuration menu
    Copy the full SHA
    5fb68e3 View commit details
    Browse the repository at this point in the history

  2. Split middleware and ApplicationExtension tests

    @hishamco
    hishamco committed Apr 14, 2022
    Configuration menu
    Copy the full SHA
    f1b18f9 View commit details
    Browse the repository at this point in the history

  3. Add UseSecurityHeaders() extension methods

    @hishamco
    hishamco committed Apr 14, 2022
    Configuration menu
    Copy the full SHA
    4d4b972 View commit details
    Browse the repository at this point in the history

  4. Use Enum-like class instead

    @hishamco
    hishamco committed Apr 14, 2022
    Configuration menu
    Copy the full SHA
    0d644c5 View commit details
    Browse the repository at this point in the history

  5. Simplify UseSecurityHeaders() with SecurityHeadersBuilder

    @hishamco
    hishamco committed Apr 14, 2022
    Configuration menu
    Copy the full SHA
    a279a51 View commit details
    Browse the repository at this point in the history

  6. Add UI to configure ReferrerPolicy

    @hishamco
    hishamco committed Apr 14, 2022
    Configuration menu
    Copy the full SHA
    2282f58 View commit details
    Browse the repository at this point in the history

  7. Fix the build

    @hishamco
    hishamco committed Apr 14, 2022
    Configuration menu
    Copy the full SHA
    e362afd View commit details
    Browse the repository at this point in the history

  8. Merge branch 'main' into hishamco/security-module

    @hishamco
    hishamco authored Apr 14, 2022
    Configuration menu
    Copy the full SHA
    820678e View commit details
    Browse the repository at this point in the history

  9. Remove unnecessar using

    @hishamco
    hishamco committed Apr 14, 2022
    Configuration menu
    Copy the full SHA
    d08e3e0 View commit details
    Browse the repository at this point in the history

  10. Fix broken test

    @hishamco
    hishamco committed Apr 14, 2022
    Configuration menu
    Copy the full SHA
    99ede53 View commit details
    Browse the repository at this point in the history

  11. Refactoring

    @hishamco
    hishamco committed Apr 14, 2022
    Configuration menu
    Copy the full SHA
    e9c2c3a View commit details
    Browse the repository at this point in the history

Commits on Apr 15, 2022

  1. Add SecurityHeadersBuilder extension methods

    @hishamco
    hishamco committed Apr 15, 2022
    Configuration menu
    Copy the full SHA
    530a992 View commit details
    Browse the repository at this point in the history

  2. Add X-Frame-Options header

    @hishamco
    hishamco committed Apr 15, 2022
    Configuration menu
    Copy the full SHA
    d70cc23 View commit details
    Browse the repository at this point in the history

  3. XFrameOptions -> FrameOptions

    @hishamco
    hishamco committed Apr 15, 2022
    Configuration menu
    Copy the full SHA
    3c8f64b View commit details
    Browse the repository at this point in the history

  4. Introduce options builder for fluent configuration

    @hishamco
    hishamco committed Apr 15, 2022
    Configuration menu
    Copy the full SHA
    f0a97ec View commit details
    Browse the repository at this point in the history

  5. Remove unnecessary ApplicationBuilder extension methods

    @hishamco
    hishamco committed Apr 15, 2022
    Configuration menu
    Copy the full SHA
    17af2b5 View commit details
    Browse the repository at this point in the history

  6. Move SecurityHeaderNames to OC.Infrastructure.Abstractions

    @hishamco
    hishamco committed Apr 15, 2022
    Configuration menu
    Copy the full SHA
    233654d View commit details
    Browse the repository at this point in the history

Commits on Apr 16, 2022

  1. Add PermissionsPolicy header

    @hishamco
    hishamco committed Apr 16, 2022
    Configuration menu
    Copy the full SHA
    37e1308 View commit details
    Browse the repository at this point in the history

  2. Add X-Content-Type-Options header

    @hishamco
    hishamco committed Apr 16, 2022
    Configuration menu
    Copy the full SHA
    a167ea9 View commit details
    Browse the repository at this point in the history

Commits on Apr 17, 2022

  1. Refactoring

    @hishamco
    hishamco committed Apr 17, 2022
    Configuration menu
    Copy the full SHA
    1aefe17 View commit details
    Browse the repository at this point in the history

  2. Add origin option for PermissonsPolicy

    @hishamco
    hishamco committed Apr 17, 2022
    Configuration menu
    Copy the full SHA
    0dbd2fa View commit details
    Browse the repository at this point in the history

Commits on Apr 18, 2022

  1. Add unit tests

    @hishamco
    hishamco committed Apr 18, 2022
    Configuration menu
    Copy the full SHA
    5538387 View commit details
    Browse the repository at this point in the history

  2. Remove ContentTypeOptions settings so it should be added always

    @hishamco
    hishamco committed Apr 18, 2022
    Configuration menu
    Copy the full SHA
    ffc9f06 View commit details
    Browse the repository at this point in the history

  3. Change settings hint

    @hishamco
    hishamco committed Apr 18, 2022
    Configuration menu
    Copy the full SHA
    a6fe830 View commit details
    Browse the repository at this point in the history

  4. Add Strict-Transport-Security header

    @hishamco
    hishamco committed Apr 18, 2022
    Configuration menu
    Copy the full SHA
    efc8125 View commit details
    Browse the repository at this point in the history

  5. Bring UseSecurityHeaders() back

    @hishamco
    hishamco committed Apr 18, 2022
    Configuration menu
    Copy the full SHA
    10a5f1b View commit details
    Browse the repository at this point in the history

Commits on Apr 19, 2022

  1. Add fullscreen in self origin as default permission

    @hishamco
    hishamco committed Apr 19, 2022
    Configuration menu
    Copy the full SHA
    36770fb View commit details
    Browse the repository at this point in the history

Commits on Apr 21, 2022

  1. Refactoring 

    - Introduce options builders
- Add overload with configuration builder in the middlewares
- Add SecurityHeadersOptions
- Add options for permission policies
    @hishamco
    hishamco committed Apr 21, 2022
    Configuration menu
    Copy the full SHA
    fffa545 View commit details
    Browse the repository at this point in the history

  2. Address feedback

    @hishamco
    hishamco committed Apr 21, 2022
    Configuration menu
    Copy the full SHA
    267c0d8 View commit details
    Browse the repository at this point in the history

  3. Remove Order from startup

    @hishamco
    hishamco committed Apr 21, 2022
    Configuration menu
    Copy the full SHA
    26f2c0c View commit details
    Browse the repository at this point in the history

  4. Add Options namespace

    @hishamco
    hishamco committed Apr 21, 2022
    Configuration menu
    Copy the full SHA
    d98af9d View commit details
    Browse the repository at this point in the history

  5. Remove unnecessary Values property from PermissionsPolicyOptions

    @hishamco
    hishamco committed Apr 21, 2022
    Configuration menu
    Copy the full SHA
    4adc16f View commit details
    Browse the repository at this point in the history

  6. Remove the checks from the middleware constructors

    @hishamco
    hishamco committed Apr 21, 2022
    Configuration menu
    Copy the full SHA
    307d1a8 View commit details
    Browse the repository at this point in the history

  7. Use ArgumentNullException.ThrowIfNull()

    @hishamco
    hishamco committed Apr 21, 2022
    Configuration menu
    Copy the full SHA
    a94b85e View commit details
    Browse the repository at this point in the history

  8. Remove IsAlwaysEnabled

    @hishamco
    hishamco committed Apr 21, 2022
    Configuration menu
    Copy the full SHA
    ddf54ac View commit details
    Browse the repository at this point in the history

Commits on Apr 22, 2022

  1. Remove HSTS

    @hishamco
    hishamco committed Apr 22, 2022
    Configuration menu
    Copy the full SHA
    a385a07 View commit details
    Browse the repository at this point in the history

  2. Options should be enum like classes

    @hishamco
    hishamco committed Apr 22, 2022
    Configuration menu
    Copy the full SHA
    5df89f3 View commit details
    Browse the repository at this point in the history

  3. Use single middleware

    @hishamco
    hishamco committed Apr 22, 2022
    Configuration menu
    Copy the full SHA
    ad68337 View commit details
    Browse the repository at this point in the history

  4. Address feedback 

    - Introduce header providers
- Remove unnecessary options
- Add UI for permissions policy
    @hishamco
    hishamco committed Apr 22, 2022
    Configuration menu
    Copy the full SHA
    b3d1ad5 View commit details
    Browse the repository at this point in the history

  5. Remove unnecessary property

    @hishamco
    hishamco committed Apr 22, 2022
    Configuration menu
    Copy the full SHA
    aa791f0 View commit details
    Browse the repository at this point in the history

Commits on Apr 23, 2022

  1. Ability to configure allowed permissions policy with fluent APIs

    @hishamco
    hishamco committed Apr 23, 2022
    Configuration menu
    Copy the full SHA
    6f8433d View commit details
    Browse the repository at this point in the history

  2. Make options configuration APIs consistent

    @hishamco
    hishamco committed Apr 23, 2022
    Configuration menu
    Copy the full SHA
    9692ed4 View commit details
    Browse the repository at this point in the history

  3. Group permissions policy options into a folder

    @hishamco
    hishamco committed Apr 23, 2022
    Configuration menu
    Copy the full SHA
    48314d1 View commit details
    Browse the repository at this point in the history

  4. Add Content-Security-Policy header

    @hishamco
    hishamco committed Apr 23, 2022
    Configuration menu
    Copy the full SHA
    9146d99 View commit details
    Browse the repository at this point in the history

Commits on Apr 24, 2022

  1. Remove unnecessary extension methods

    @hishamco
    hishamco committed Apr 24, 2022
    Configuration menu
    Copy the full SHA
    211dc36 View commit details
    Browse the repository at this point in the history

  2. Add fluent APIs for CSP

    @hishamco
    hishamco committed Apr 24, 2022
    Configuration menu
    Copy the full SHA
    54cb66d View commit details
    Browse the repository at this point in the history

  3. Remove options & options builders

    @hishamco
    hishamco committed Apr 24, 2022
    Configuration menu
    Copy the full SHA
    41d1c32 View commit details
    Browse the repository at this point in the history

Commits on Apr 26, 2022

  1. ContentSecurityPolicySourceValue -> ContentSecurityPolicyOriginValue

    @hishamco
    hishamco committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    4e4cf84 View commit details
    Browse the repository at this point in the history

  2. Convert ContentSecurityPolicy to string[]

    @hishamco
    hishamco committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    1a376e6 View commit details
    Browse the repository at this point in the history

Commits on Apr 27, 2022

  1. Fix NRE

    @hishamco
    hishamco committed Apr 27, 2022
    Configuration menu
    Copy the full SHA
    33cbd00 View commit details
    Browse the repository at this point in the history

  2. Fix UI

    @hishamco
    hishamco committed Apr 27, 2022
    Configuration menu
    Copy the full SHA
    5906f00 View commit details
    Browse the repository at this point in the history

  3. Add UI for CSP header

    @hishamco
    hishamco committed Apr 27, 2022
    Configuration menu
    Copy the full SHA
    24d180e View commit details
    Browse the repository at this point in the history

  4. Fix issues in SecuritySettingsDisplayDriver

    @hishamco
    hishamco committed Apr 27, 2022
    Configuration menu
    Copy the full SHA
    45d3b68 View commit details
    Browse the repository at this point in the history

  5. Check ContentSecurityPolicy length for simplicity

    @hishamco
    hishamco committed Apr 27, 2022
    Configuration menu
    Copy the full SHA
    b7eb2ff View commit details
    Browse the repository at this point in the history

Commits on May 7, 2022

  1. Address feedback

    @hishamco
    hishamco committed May 7, 2022
    Configuration menu
    Copy the full SHA
    994f44e View commit details
    Browse the repository at this point in the history

  2. Remove unnecessary options

    @hishamco
    hishamco committed May 7, 2022
    Configuration menu
    Copy the full SHA
    fb1e286 View commit details
    Browse the repository at this point in the history

  3. Refactoring

    @hishamco
    hishamco committed May 7, 2022
    Configuration menu
    Copy the full SHA
    fb69ca4 View commit details
    Browse the repository at this point in the history

  4. Add ConfigureSecuritySettings() extension method

    @hishamco
    hishamco committed May 7, 2022
    Configuration menu
    Copy the full SHA
    d8782a2 View commit details
    Browse the repository at this point in the history

  5. Fix NRE

    @hishamco
    hishamco committed May 7, 2022
    Configuration menu
    Copy the full SHA
    92e5032 View commit details
    Browse the repository at this point in the history

  6. Change policies separator to comma

    @hishamco
    hishamco committed May 7, 2022
    Configuration menu
    Copy the full SHA
    2f8f7ce View commit details
    Browse the repository at this point in the history

Commits on May 10, 2022

  1. Fix security settings section

    @hishamco
    hishamco committed May 10, 2022
    Configuration menu
    Copy the full SHA
    fa2aa73 View commit details
    Browse the repository at this point in the history

  2. Fix script issue

    @hishamco
    hishamco committed May 10, 2022
    Configuration menu
    Copy the full SHA
    d36438c View commit details
    Browse the repository at this point in the history

  3. Set PermissionsPolicy default to empty array of string

    @hishamco
    hishamco committed May 10, 2022
    Configuration menu
    Copy the full SHA
    b052d20 View commit details
    Browse the repository at this point in the history

  4. Fix settings in ConfigureSecuritySettings()

    @hishamco
    hishamco committed May 10, 2022
    Configuration menu
    Copy the full SHA
    34bf774 View commit details
    Browse the repository at this point in the history

  5. Use IOptions<SecuritySettings> to get post configured settings properly

    @hishamco
    hishamco committed May 10, 2022
    Configuration menu
    Copy the full SHA
    26129c9 View commit details
    Browse the repository at this point in the history

Commits on May 11, 2022

  1. Move SecurityHeaderMiddleware to Services namespace

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    eabf382 View commit details
    Browse the repository at this point in the history

  2. Replace SecuritySettings by SecurityHeaderOptions

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    555cc36 View commit details
    Browse the repository at this point in the history

  3. Use IOptionsSnapshot

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    e5ac7b7 View commit details
    Browse the repository at this point in the history

  4. Set permission policy value when its set

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    a712dab View commit details
    Browse the repository at this point in the history

  5. Return SiteSettings back

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    4385a4c View commit details
    Browse the repository at this point in the history

  6. Fix settings when they come from appsettings

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    c1e8db4 View commit details
    Browse the repository at this point in the history

  7. Use IEquatable

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    3f5b18e View commit details
    Browse the repository at this point in the history

  8. Display warning alert when the settings comes from appsettings

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    f26aaf6 View commit details
    Browse the repository at this point in the history

  9. Override FrameOptions by CSP if FrameAncestors exists

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    99659d5 View commit details
    Browse the repository at this point in the history

  10. Add docs for the Orchard.Security module

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    b992eb6 View commit details
    Browse the repository at this point in the history

  11. Rename unit tests

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    3c4a606 View commit details
    Browse the repository at this point in the history

  12. Include all permissons policy directives

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    9822a43 View commit details
    Browse the repository at this point in the history

  13. Fix broken tests

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    a7fbf30 View commit details
    Browse the repository at this point in the history

  14. Add section about ConfigureSecuritySettings()

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    9632a29 View commit details
    Browse the repository at this point in the history

  15. Enable the module though all recipes

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    105e4e7 View commit details
    Browse the repository at this point in the history

  16. Add missing switch cases

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    7d4ab3b View commit details
    Browse the repository at this point in the history

  17. Revert SecuritySettings changes bug fix

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    cd014f5 View commit details
    Browse the repository at this point in the history

  18. Change alert type

    @hishamco
    hishamco committed May 11, 2022
    Configuration menu
    Copy the full SHA
    d7f31c1 View commit details
    Browse the repository at this point in the history

Commits on May 12, 2022

  1. Remove Frame Options

    @hishamco
    hishamco committed May 12, 2022
    Configuration menu
    Copy the full SHA
    ac6a224 View commit details
    Browse the repository at this point in the history

  2. Remove readonly modifier

    @hishamco
    hishamco committed May 12, 2022
    Configuration menu
    Copy the full SHA
    398d916 View commit details
    Browse the repository at this point in the history

Commits on May 13, 2022

  1. Fix typo

    @hishamco
    hishamco committed May 13, 2022
    Configuration menu
    Copy the full SHA
    c98a9a7 View commit details
    Browse the repository at this point in the history

  2. Link to configuration docs

    @hishamco
    hishamco committed May 13, 2022
    Configuration menu
    Copy the full SHA
    b138eec View commit details
    Browse the repository at this point in the history

  3. Rename unit tests

    @hishamco
    hishamco committed May 13, 2022
    Configuration menu
    Copy the full SHA
    6493df5 View commit details
    Browse the repository at this point in the history

  4. IOptions<SecurityHeadersOptions> -> SecurityHeadersOptions

    @hishamco
    hishamco committed May 13, 2022
    Configuration menu
    Copy the full SHA
    ed783df View commit details
    Browse the repository at this point in the history

  5. Fix comments

    @hishamco
    hishamco committed May 13, 2022
    Configuration menu
    Copy the full SHA
    6e42b5e View commit details
    Browse the repository at this point in the history

  6. Add FromConfiguration to SecuritySettings

    @hishamco
    hishamco committed May 13, 2022
    Configuration menu
    Copy the full SHA
    9a6ff60 View commit details
    Browse the repository at this point in the history

  7. No need to add policies with None origin

    @hishamco
    hishamco committed May 13, 2022
    Configuration menu
    Copy the full SHA
    8ddb49e View commit details
    Browse the repository at this point in the history

  8. Fix policies localized strings

    @hishamco
    hishamco committed May 13, 2022
    Configuration menu
    Copy the full SHA
    13836a9 View commit details
    Browse the repository at this point in the history

  9. Add link to mkdocs.ml

    @hishamco
    hishamco committed May 13, 2022
    Configuration menu
    Copy the full SHA
    b1a18de View commit details
    Browse the repository at this point in the history

Commits on May 14, 2022

  1. Fix configuration docs path

    @hishamco
    hishamco committed May 14, 2022
    Configuration menu
    Copy the full SHA
    35dda92 View commit details
    Browse the repository at this point in the history

  2. Rename unit tests

    @hishamco
    hishamco committed May 14, 2022
    Configuration menu
    Copy the full SHA
    e89a245 View commit details
    Browse the repository at this point in the history

Commits on May 15, 2022

  1. Use dictionary for permissions policy

    @hishamco
    hishamco committed May 15, 2022
    Configuration menu
    Copy the full SHA
    d9b6f57 View commit details
    Browse the repository at this point in the history

Commits on May 16, 2022

  1. Apply Jean-Thierry change

    @hishamco
    hishamco committed May 16, 2022
    Configuration menu
    Copy the full SHA
    2b1ffd8 View commit details
    Browse the repository at this point in the history

  2. Fix tests

    @hishamco
    hishamco committed May 16, 2022
    Configuration menu
    Copy the full SHA
    26b2580 View commit details
    Browse the repository at this point in the history

Commits on May 17, 2022

  1. Edit view fixes

    @jtkech
    jtkech committed May 17, 2022
    Configuration menu
    Copy the full SHA
    c51c6c8 View commit details
    Browse the repository at this point in the history

  2. Remove overrideAdminSettings parameter

    @hishamco
    hishamco committed May 17, 2022
    Configuration menu
    Copy the full SHA
    1f4ff2a View commit details
    Browse the repository at this point in the history

  3. Fixes Settings merging from both Configuration and Site settings

    @jtkech
    jtkech committed May 17, 2022
    Configuration menu
    Copy the full SHA
    43b78a9 View commit details
    Browse the repository at this point in the history

  4. Fix docs to react to the dictionary changes

    @hishamco
    hishamco committed May 17, 2022
    Configuration menu
    Copy the full SHA
    2d437e7 View commit details
    Browse the repository at this point in the history

  5. Rename unit tests

    @hishamco
    hishamco committed May 17, 2022
    Configuration menu
    Copy the full SHA
    5bc5425 View commit details
    Browse the repository at this point in the history

  6. Address feedback

    @hishamco
    hishamco committed May 17, 2022
    Configuration menu
    Copy the full SHA
    fa9eed7 View commit details
    Browse the repository at this point in the history

  7. Add docs for InitializePolicy

    @hishamco
    hishamco committed May 17, 2022
    Configuration menu
    Copy the full SHA
    9072844 View commit details
    Browse the repository at this point in the history

  8. Add missing ouble quotations

    @hishamco
    hishamco committed May 17, 2022
    Configuration menu
    Copy the full SHA
    91dd721 View commit details
    Browse the repository at this point in the history