1
0
Fork 0
mirror of https://github.com/warmcat/libwebsockets.git synced 2025-03-16 00:00:07 +01:00
libwebsockets/minimal-examples/http-server/minimal-http-server-basicauth/mount-origin/index.html
Andy Green d9f982a055 minimal examples: update for CSP best practices
1) update the logos to svg

2) add svg icon for strict security policy where used

3) define new vhost option flag to enforce sending CSP headers
   with the result code

4) add vhost option flag to minimal examples to
   enforce sending CSP where applicable

5) Go through all the affecting examples confirming they
   still work

6) add LWS_RECOMMENDED_MIN_HEADER_SPACE constant (currently
   2048) to clarify when we need a buffer to hold headers...
   with CSP the headers have become potentially a lot
   larger.
2018-11-21 17:03:29 +08:00

25 lines
852 B
HTML

<html>
<head>
<meta charset=utf-8 http-equiv="Content-Language" content="en"/>
</head>
<body>
<img src="libwebsockets.org-logo.svg">
<img src="strict-csp.svg"><br>
Hello from the <b>minimal http server basic auth example</b>.
<p>
This is a static page served from ./mount-origin/index.html.
<p>
Stuff down /secret in the URL space is protected by Basic Auth.<br>
Your browser will ask for a username / password combination, and<br>
lws will check it against ./ba-passwords, which contains a list of<br>
"username:password" one per line.<br>
<br>
The example content for ba-passwords is literally "user:password".<br>
Click on the link into the protected area of the URL space below<br>
and give your browser the credentials "user" and "password".
<p>
<a href="/secret/" target=_blank>/secret</a>
</body>
</html>