464e46b02b
1765: Set sensible cookie flags on the admin app r=mergify[bot] a=nextgens ## What type of PR? Bugfix ## What does this PR do? It sets the right flags on the session cookie issued by the admin app. This should probably be backported as the lack of secure flag on TLS-enabled setup is a high risk vulnerability. SameSite is hardening / helps against CSRF on modern browsers HTTPOnly is hardening / helps reduce the impact of XSS Co-authored-by: Florent Daigniere <nextgens@freenetproject.org> |
4 years ago | |
---|---|---|
.github | 4 years ago | |
core | 4 years ago | |
docs | 4 years ago | |
optional | 4 years ago | |
setup | 4 years ago | |
tests | 4 years ago | |
towncrier | 4 years ago | |
webmails | 4 years ago | |
.gitignore | 5 years ago | |
.mergify.yml | 4 years ago | |
.travis.yml | 4 years ago | |
AUTHORS.md | 4 years ago | |
CHANGELOG.md | 4 years ago | |
CODE_OF_CONDUCT.md | 7 years ago | |
CONTRIBUTING.md | 5 years ago | |
ISSUE_TEMPLATE.md | 4 years ago | |
LICENSE.md | 8 years ago | |
PULL_REQUEST_TEMPLATE.md | 6 years ago | |
README.md | 6 years ago | |
bors.toml | 6 years ago | |
pyproject.toml | 5 years ago |
README.md
Mailu is a simple yet full-featured mail server as a set of Docker images. It is free software (both as in free beer and as in free speech), open to suggestions and external contributions. The project aims at providing people with an easily setup, easily maintained and full-featured mail server while not shipping proprietary software nor unrelated features often found in popular groupware.
Most of the documentation is available on our Website, you can also try our demo server before setting up your own, and come talk to us on Matrix.
Features
Main features include:
- Standard email server, IMAP and IMAP+, SMTP and Submission
- Advanced email features, aliases, domain aliases, custom routing
- Web access, multiple Webmails and administration interface
- User features, aliases, auto-reply, auto-forward, fetched accounts
- Admin features, global admins, announcements, per-domain delegation, quotas
- Security, enforced TLS, Letsencrypt!, outgoing DKIM, anti-virus scanner
- Antispam, auto-learn, greylisting, DMARC and SPF
- Freedom, all FOSS components, no tracker included
Contributing
Mailu is free software, open to suggestions and contributions. All components are free software and compatible with the MIT license. All specific configuration files, Dockerfiles and code are placed under the MIT license.