Draft
Conversation
Checks for `always` flag on the following nginx headers: * `Strict-Transport-Security` * `X-Content-Type-Options` * `X-Frame-Options` * `Content-Security-Policy` * `Content-Security-Policy-Report-Only` Closes #1527
Document expected contents of `version.txt` and allow future changes to be detected by a failing test.
Various commands running `git describe --tags` will fail if running in a repo (or submodule repo) which doesn't have the canonical repository's tags available. This commit converts missing tags into git hashes, per `git-describe --always` docs: > ``` > --always > Show uniquely abbreviated commit object as fallback. > ``` Closes #1640
Use libpq PG* environment variables for DB configuration handling and provide backward compatibility for legacy DB_* environment variables
This seeds the environment with PG* environment variables, as per https://www.postgresql.org/docs/current/libpq-envars.html which the backend now uses (getodk/central-backend#1748). There is backward compatibility for the previously used DB_* environment variables, except for DB_SSL, which the user will need to port.
Web-Forms includes the ODK logo as: <img data-v-8e923f80="" class="logo" src="data:image/svg+xml,%3csvg%20width='426'%20height='223'..." alt="ODK"> This means `data:` needs to be allowed by the `image-src` directive in the `Content-Security-Policy` / `Content-Security-Policy-Report-Only` header. Resolves: https://getodk.sentry.io/issues/7094732050/ Example: https://staging.getodk.cloud/projects/210/forms/group_in_group_reg/submissions/new
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
6 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR prepares the release of v2026.1. It should only contain changes from other PRs that have already been approved and merged (and possibly merge commits from the
masterbranch).