mirror of https://github.com/nextcloud/server.git synced 2025-10-26 19:21:34 +00:00

Nextcloud Server

Go to file

Lukas Reschke b20174bdad Allow AppFramework applications to specify a custom CSP header This change allows AppFramework applications to specify a custom CSP header for example when the default policy is too strict. Furthermore this allows us to partially migrate away from CSS and allowed eval() in our JavaScript components. Legacy ownCloud components will still use the previous policy. Application developers can use this as following in their controllers: ```php $response = new TemplateResponse('activity', 'list', []); $cspHelper = new ContentSecurityPolicyHelper(); $cspHelper->addAllowedScriptDomain('www.owncloud.org'); $response->addHeader('Content-Security-Policy', $cspHelper->getPolicy()); return $response; ``` Fixes https://github.com/owncloud/core/issues/11857 which is a pre-requisite for https://github.com/owncloud/core/issues/13458 and https://github.com/owncloud/core/issues/11925		2015-02-16 11:00:41 +01:00
.idea
3rdparty@a32d3924bd	Update SabreDAV to 1.8.12	2015-01-23 11:12:40 +01:00
apps	[tx-robot] updated from transifex	2015-02-15 01:54:31 -05:00
build
config	Allow AppFramework applications to specify a custom CSP header	2015-02-16 11:00:41 +01:00
core	[tx-robot] updated from transifex	2015-02-16 01:54:30 -05:00
l10n	ignore minified js, owncloud/news#719	2015-02-05 15:48:58 +01:00
lib	Allow AppFramework applications to specify a custom CSP header	2015-02-16 11:00:41 +01:00
ocs
settings	[tx-robot] updated from transifex	2015-02-16 01:54:30 -05:00
tests	Allow AppFramework applications to specify a custom CSP header	2015-02-16 11:00:41 +01:00
themes
.bowerrc
.gitignore	Add provisioning_api app	2014-12-24 22:15:20 +01:00
.gitmodules
.htaccess	Setting default charset to UTF-8 in .htaccess and .user.ini	2015-02-10 09:39:06 +01:00
.jshintrc
.scrutinizer.yml	bower jquery-ui - exported changes to a separate css file	2014-12-13 09:47:34 +01:00
.tag
.user.ini	Setting default charset to UTF-8 in .htaccess and .user.ini	2015-02-10 09:39:06 +01:00
AUTHORS
autotest-external.sh	Setup a docker container that holds a webdav instance to test files_external	2014-12-17 21:50:35 +01:00
autotest-hhvm.sh	Adding autotest-hhvm.sh	2014-12-18 10:21:15 +01:00
autotest-js.sh
autotest.cmd
autotest.sh
bower.json	bump jquery.strengthify to 0.4.1	2015-01-06 13:48:58 +01:00
buildjsdocs.sh
console.php	Check for the posix extension - refs https://github.com/owncloud/core/pull/13282#issuecomment-69602645	2015-01-12 20:17:02 +01:00
CONTRIBUTING.md	Unit tests are a must have for any changed code	2015-01-21 11:15:32 +01:00
COPYING-AGPL
COPYING-README
cron.php
db_structure.xml	Revert "Improve: Index for file_map"	2015-02-13 15:15:28 +01:00
index.html
index.php	Show warning for PHP versions older than 5.4.0	2015-02-05 11:41:00 +01:00
indie.json
issue_template.md	Also add secret	2014-12-19 10:57:46 +01:00
occ
public.php
README.md	version up	2015-01-11 16:17:57 +01:00
remote.php
robots.txt
status.php
version.php	Update version to a higher one then before	2015-02-13 15:24:53 +01:00