Feature/initial code

[A-Souhei]

Description

Initial code for this new extension.
Features:

• Adds OWASP headers
• Removes image_url capability in user/group/organization creation and update

Added tests for them.

The values on the picture are changed in order to test if the variables are read.

Relates https://github.com/fjelltopp/who-afro-ckan/pull/622
Relates https://github.com/fjelltopp/fjelltopp-infrastructure/pull/349
Closes https://github.com/fjelltopp/who-afro-ckan/issues/609
Closes https://github.com/fjelltopp/who-afro-ckan/issues/612

Checklist

Put an x in the boxes that apply to this pull request (you can also fill these out after opening the pull request).
You may not need to check all boxes.

• The GitHub ticket for this issue has been updated to "Ready to Review" or equivalent.
• I have developed these changes in discussion with the appropriate project manager.
• My code follows the general Fjelltopp documentation (see Confluence).
• I have made corresponding changes to the Fjelltopp documentation (see Confluence).
• I have rebased this branch with master.
• New dependency changes have been committed.
• I have added automated tests that prove my fix is effective or that my feature works.
• New and existing tests pass locally with my changes.
• My changes generate no new warnings.
• I have performed a self-review of my own code.
• I have assigned at least one reviewer.
• I have assigned at least one label to this PR: "patch", "minor", "major".

[cooper667]

I wonder if this would be the place to handle the caching headers @ChasNelson1990 ?

Ideally we want to be able to set them by file extension I think, looks like there's some overlap with this?

[A-Souhei]

overlap

@cooper667 I do not understand, could you explain please?

[A-Souhei]

I will fix after the reviews!

[cooper667]

overlap

@cooper667 I do not understand, could you explain please?

Not a problem for this PR! It's more just me wondering whether the stuff im going to work on belongs in this extension. It's not quite security but it does involve changing the headers so may make sense logically

[jonathansberry]

Hi Toavina, thanks for getting this together. Good progress. There are few things concerning me slightly, and af ew other hints and tips around writing good CKAN code. Hopefully it is helpful!