leap_platform.git, branch develop

Use webapp 0.9

2016-11-10T22:38:31+00:00

Don't do strict checking for nickserver

2016-11-09T12:50:30+00:00

Sometimes nickserver is listed with `ruby /usr/bin/nickserver start`
in the process table, sometimes with `/usr/bin/ruby /usr/bin/nickserver start`.

We should do proper checking with `systemctl status nickserver` to make
sure the service is up though (https://leap.se/code/issues/8579).

Meanwhile it's ok to not do strict checking.

New nickserver is using fully qualified ruby path now

2016-11-08T20:05:39+00:00

Additional entries/updates

2016-11-08T14:52:37+00:00

refresh docs using https://0xacab.org/leap/leap_se/blob/master/docs/README.md process

2016-11-03T18:05:52+00:00

bugfix: allow 'leap facts update' to work again.

2016-11-01T18:40:22+00:00

Change CI build webapp source branch to master.

2016-10-25T13:20:31+00:00

The develop branch was removed, and current master is the same as
develop was before.

Set X-XSS-Protection HTTP response header to '1'.

2016-10-24T15:31:41+00:00

This HTTP response header enables the Cross-site scripting (XSS) filter
built into some modern web browsers. This header is usually enabled by
default anyway, so the role of this header is to re-enable the filter
if it was disabled maliciously, or by accident.

Set X-Content-Type-Options nosniff.

2016-10-24T15:29:59+00:00

Setting this header will prevent the browser from interpreting files as
something else than declared by the content type in the HTTP
headers. This will prevent the browser from MIME-sniffing a response
away from the declared content-type.

When this is not set, older versions of Internet Explorer and Chrome
perform MIME-sniffing on the response body, potentially causing the
response body to be interpreted and displayed as a content type other
than the declared content type.

[bug] properly set 'enrollment_policy' in provider.json

2016-10-20T18:16:30+00:00