4 docs tagged with "security"

Lagoon generates the HTTP Content-Security-Policy header from the application's public URL and the Lagoon:CSP section of the appsettings.json file.

Condition the display and editing of a UI area based on policies, and propagate validated policies to a subtree.

Store secrets outside the repository (dotnet user-secrets in development, environment variables or vault in production), share the UserSecretsId between the server, batch and dotnet ef via Directory.Build.props, and reference them in the configuration with ${Key} placeholders.

The LgHtmlSanitizer service from Lagoon.Server removes scripts, event handlers, dangerous URLs, and forms from HTML content before it is displayed to users.