Ayumi Hamasaki dd53206a82 Service Workers Invalid security token and Clear Site Data HTTP Header (#4088) ...

If a website has a Service Worker installed it would load and register before a User tries to login to the backend causing a "Invalid security token" message. This PR unregisters any installed Service Worker when a User opens the backend Signin webpage.

I have also added the NEW Security Headers to add Protection to October's Cache and Cookies. This includes two new Middleware that first clears any bad cached data before a User tries to login and the second Middleware will clear all the sensitive User Data when a User signs out of the Backend.

For more info on the new Security Header 'Clear Site Data' you can see the spec found here: https://www.w3.org/TR/clear-site-data/

Fixes #4076, fixes #3707.

2019-03-01 16:22:18 -06:00

..

auth.js

Welcome to the world, October :-)

2014-05-14 23:24:20 +10:00

uninstall-sw.js

Service Workers Invalid security token and Clear Site Data HTTP Header (#4088)

2019-03-01 16:22:18 -06:00