rustguac

mirror of https://github.com/sol1/rustguac.git synced 2026-10-26 13:39:54 +00:00

Files

T

Jad Seifeddine 04597c20cd csp: allow data: and blob: images so Safari and Firefox can draw

The Content-Security-Policy had no img-src, so default-src 'self'
governed images and refused the data: URIs the Guacamole client draws
every tile from on browsers without WebCodecs ImageDecoder. Safari and
Firefox rendered SSH and RDP sessions black with only rect fills and the
cursor cell showing; Chrome decodes straight from the stream and never
fetches a URL, which hid it. The same directive blocks the remote mouse
cursor (cursor: url(data:...)) and blob: image URLs.

Move the policy into a documented constant, add img-src 'self' data:
blob:, and add a unit test that fails if img-src loses either source.
Document the proxy-side header replacement for releases up to v1.10.5.

Fixes #249

2026-10-12 11:20:36 +07:00

api.md

vnc: add optional username for servers with username auth

2026-10-09 13:47:23 +11:00

configuration.md

session: fence probe, jump host and Proxmox; pin SSH/VNC address

2026-10-01 22:01:34 +10:00

credential-variables.md

feat(import): add --map to rewrite credential fields on Guacamole import

2026-08-11 11:32:26 +10:00

deployment-guide.md

docs: CLI group mapping, CLI audit log, and two stale OIDC docs