Commit Graph
3 Commits
Author SHA1 Message Date
Alastair Houghton 17c00e5a58 fix: update dependencies to avoid some CVEs.
Updated hcsshim and Gorilla dependencies to avoid some CVEs.

Signed-off-by: Alastair Houghton <alastair@alastairs-place.net>
2020-12-29 12:20:24 +00:00
Alastair Houghton 3288450b3e fix: copy the "web" directory.
The Dockerfile was changed to do

    COPY web .

which is unfortunate because that means copy the *contents* of the directory
"web", rather than copying the directory itself which is what the author
intended.

Issues: #1820
Signed-off-by: Alastair Houghton <alastair@alastairs-place.net>
2020-10-05 15:52:30 +01:00
Alastair Houghton 9187aa669d fix: allow Authorization header when doing CORS
The Authorization header needs to be allowed when doing CORS because
otherwise /userinfo can't work.  It isn't one of the headers
explicitly allowed by default by Gorilla, so we have to call
handlers.AllowedHeaders() to specify it.

Issues: #1532
Signed-off-by: Alastair Houghton <alastair@alastairs-place.net>
2020-10-05 15:01:54 +01:00