Livio Spring
Livio Spring
we should disable svg upload in the backend as well
ok let's just merge this one and handle the assets later on (i've updated #4256 accordingly) @peintnermax can you quickly solve the conflict / remerge main, please
good question... at least no one has reported it anymore 😄
closing this as no one reported it anymore, please reopen if it reoccurs
i believe we're not able to change the unsafe-eval and unsafe-inline as i see it, they're comming for grpc-web:  and angular css module styling @peintnermax could you check this?
to ensure HSTS is set on all endpoints, adding it in GCLB is for sure the easiest and fastest way but IMO we should solve this in ZITADEL itself later...
seems to be a race condition... i could reproduce it only twice on dev (never locally) with more than 15 created users each with multiple links i'm going to extend...
this issue never occurred again... the mentioned issue seemed similar, but is apparently caused by FF: https://github.com/zitadel/zitadel/issues/4082#issuecomment-1211717627
- metadata and resourceowner scopes always granted - roles automatically from project see also https://github.com/zitadel/zitadel/issues/4367#issuecomment-1250914562
current state: @adlerhurst checks if "AS OF SYSTEM TIME" for the queries (esp. for the current sequences) is necessary