##// END OF EJS Templates
auth: only use X- headers instead of wsgi.url_scheme if explicitly told so in url_scheme_header - drop https_fixup setting...
auth: only use X- headers instead of wsgi.url_scheme if explicitly told so in url_scheme_header - drop https_fixup setting Before, several X- headers would be trusted to overrule the actual connection protocol (http or https) seen by the Kallithea WSGI server. That was mainly when https_fixup were set, but it incorrectly also kicked in if https_fixup or use_htsts were configured. The ambiguity of which headers were used also made it less reliable. The proxy server not only had to be configured to set one of the headers correctly, it also had to make sure other headers were not passed on from the client. It would thus in some cases be possible for clients to fake the connection scheme, and thus potentially be possible to bypass restrictions configured in Kallithea. Fixed by making it configurable which WSGI environment variable to use for the protocol. Users can configure url_scheme_header to for example HTTP_X_FORWARDED_PROTO instead of using the default wsgi.url_scheme . This change is a bit similar to what is going on in the https_fixup middleware, but is doing a bit more of what for example is happening in similar code in werkzeug/middleware/proxy_fix.py . The semantics of the old https_fixup were unsafe, so it has been dropped. Admins that are upgrading must change their configuration to use the new url_scheme_header option.

File last commit:

r6333:e285bb7a default
r8680:070b8c39 default
Show More
nature.css_t
231 lines | 3.8 KiB | text/plain | TextLexer
updated docs, added sphinx build
r568 /**
* Sphinx stylesheet -- default theme
* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
*/
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 @import url("basic.css");
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 /* -- page layout ----------------------------------------------------------- */
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 body {
font-family: Arial, sans-serif;
font-size: 100%;
background-color: #111;
color: #555;
margin: 0;
padding: 0;
}
div.documentwrapper {
float: left;
width: 100%;
}
div.bodywrapper {
margin: 0 0 0 230px;
}
hr{
border: 1px solid #B1B4B6;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.document {
background-color: #eee;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.body {
background-color: #ffffff;
color: #3E4349;
padding: 0 30px 30px 30px;
font-size: 0.8em;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.footer {
color: #555;
width: 100%;
padding: 13px 0;
text-align: center;
font-size: 75%;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.footer a {
color: #444;
text-decoration: underline;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.related {
Bradley M. Kuhn
Change the blue colors to Conservancy green
r4217 background-color: #577632;
updated docs, added sphinx build
r568 line-height: 32px;
color: #fff;
text-shadow: 0px 1px 0 #444;
font-size: 0.80em;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.related a {
color: #E2F3CC;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.sphinxsidebar {
font-size: 0.75em;
line-height: 1.5em;
}
div.sphinxsidebarwrapper{
padding: 20px 0;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.sphinxsidebar h3,
div.sphinxsidebar h4 {
font-family: Arial, sans-serif;
color: #222;
font-size: 1.2em;
font-weight: normal;
margin: 0;
padding: 5px 10px;
background-color: #ddd;
text-shadow: 1px 1px 0 white
}
div.sphinxsidebar h4{
font-size: 1.1em;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.sphinxsidebar h3 a {
color: #444;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.sphinxsidebar p {
color: #888;
padding: 5px 20px;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.sphinxsidebar p.topless {
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.sphinxsidebar ul {
margin: 10px 20px;
padding: 0;
color: #000;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.sphinxsidebar a {
color: #444;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.sphinxsidebar input {
border: 1px solid #ccc;
font-family: sans-serif;
font-size: 1em;
}
div.sphinxsidebar input[type=text]{
margin-left: 20px;
}
Mads Kiilerich
docs: remove border around paypal button
r5421
div.sphinxsidebar input[type=image] {
border: 0;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 /* -- body styles ----------------------------------------------------------- */
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 a {
color: #005B81;
text-decoration: none;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 a:hover {
color: #E32E00;
text-decoration: underline;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.body h1,
div.body h2,
div.body h3,
div.body h4,
div.body h5,
div.body h6 {
font-family: Arial, sans-serif;
background-color: #BED4EB;
font-weight: normal;
color: #212224;
margin: 30px 0px 10px 0px;
padding: 5px 0 5px 10px;
text-shadow: 0px 1px 0 white
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.body h1 { border-top: 20px solid white; margin-top: 0; font-size: 200%; }
div.body h2 { font-size: 150%; background-color: #C8D5E3; }
div.body h3 { font-size: 120%; background-color: #D8DEE3; }
div.body h4 { font-size: 110%; background-color: #D8DEE3; }
div.body h5 { font-size: 100%; background-color: #D8DEE3; }
div.body h6 { font-size: 100%; background-color: #D8DEE3; }
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 a.headerlink {
color: #c60f0f;
font-size: 0.8em;
padding: 0 4px 0 4px;
text-decoration: none;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 a.headerlink:hover {
background-color: #c60f0f;
color: white;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.body p, div.body dd, div.body li {
line-height: 1.5em;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.admonition p.admonition-title + p {
display: inline;
}
div.highlight{
background-color: white;
}
div.note {
background-color: #eee;
border: 1px solid #ccc;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.seealso {
background-color: #ffc;
border: 1px solid #ff6;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.topic {
background-color: #eee;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 div.warning {
background-color: #ffe4e4;
border: 1px solid #f66;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 p.admonition-title {
display: inline;
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 p.admonition-title:after {
content: ":";
}
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 pre {
padding: 10px;
background-color: White;
color: #222;
line-height: 1.2em;
border: 1px solid #C6C9CB;
font-size: 1.2em;
margin: 1.5em 0 1.5em 0;
Mads Kiilerich
docs: move to standard box-shadow and get rid of warning about unknown -moz-box-shadow
r5420 box-shadow: 1px 1px 1px #d8d8d8;
updated docs, added sphinx build
r568 }
Mads Kiilerich
scripts: apply whitespace cleanup to more files - opt out instead of opt in
r6333
updated docs, added sphinx build
r568 tt {
background-color: #ecf0f3;
color: #222;
padding: 1px 2px;
font-size: 1.2em;
font-family: monospace;
}