nextcloud-server

Commit Graph

Author	SHA1	Message	Date
Julius Härtl	805f503814	Load theming app css as well if legacy theme is enabled Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Morris Jobke	0eebff152a	Update license headers Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Julius Härtl	ce5ad7e7f4	Prefer custom theme over theming app Signed-off-by: Julius Härtl <jus@bitgrid.net>	9 years ago
Lukas Reschke	38b3ac8213	Add ContentSecurityPolicyNonceManager Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Lukas Reschke	9e6634814e	Add support for CSP nonces CSP nonces are a feature available with CSP v2. Basically instead of saying "JS resources from the same domain are ok to be served" we now say "Ressources from everywhere are allowed as long as they add a `nonce` attribute to the script tag with the right nonce. At the moment the nonce is basically just a `<?php p(base64_encode($_['requesttoken'])) ?>`, we have to decode the requesttoken since `:` is not an allowed value in the nonce. So if somebody does on their own include JS files (instead of using the `addScript` public API, they now must also include that attribute.) IE does currently not implement CSP v2, thus there is a whitelist included that delivers the new CSP v2 policy to newer browsers. Check http://caniuse.com/#feat=contentsecuritypolicy2 for the current browser support list. An alternative approach would be to just add `'unsafe-inline'` as well as `'unsafe-inline'` is ignored by CSPv2 when a nonce is set. But this would make this security feature unusable at all in IE. Not worth it at the moment IMO. Implementing this offers the following advantages: 1. Security: As we host resources from the same domain by design we don't have to worry about 'self' anymore being in the whitelist 2. Performance: We can move oc.js again to inline JS. This makes the loading way quicker as we don't have to load on every load of a new web page a blocking dynamically non-cached JavaScript file. If you want to toy with CSP see also https://csp-evaluator.withgoogle.com/ Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Joas Schilling	1d834bd49e	Add theming information to capabilities for the client	9 years ago
Arthur Schiwon	36c1b7eb31	adjust Theming app	10 years ago
Julius Haertl	5f4e88ef6c	Theming: Add OCA.Theming Js for app interaction	10 years ago
Joas Schilling	eec6986d7c	Use public API preferable	10 years ago
Joas Schilling	813f0a0f40	Fix apps/	10 years ago
Lukas Reschke	27b699bdbc	Migrate logic to dynamic controller Also adds support for having custom login backgrounds	10 years ago
Bjoern Schiessle	10f6ca20bc	write theme settings to database	10 years ago
Bjoern Schiessle	20d250a674	initial commit for the theming app	10 years ago
Lukas Reschke	aba539703c	Update license headers	10 years ago
Thomas Müller	682821c71e	Happy new year!	10 years ago
Björn Schießle	964fa1fce3	use hooks to auto add server to the list of trusted servers once a federated share was created	10 years ago
Björn Schießle	ed039ee5eb	added app "federation", allows you to connect ownClouds and exchange user lists	10 years ago
Bjoern Schiessle	4a450c9d0d	improved admin settings	11 years ago
Jenkins for ownCloud	b585d87d9d	Update license headers	11 years ago
Morris Jobke	06aef4e8b1	Revert "Updating license headers" This reverts commit `6a1a4880f0`.	11 years ago
Jenkins for ownCloud	6a1a4880f0	Updating license headers	11 years ago
Tom Needham	a4f270a9ce	Add placeholder app.php for provisioning_api so app is detected	11 years ago
Jörn Friedrich Dreyer	799fb46927	add missing @deprecated annotation to legacy classes	12 years ago
Andrew Brown	8a223eb62d	Move legacy search to 'lib/private/legacy' This fixes errors where apps would try to start providers using OC_Search and would fail. Also, made OC_Search simply inherit from \OC\Search.	12 years ago
Jörn Friedrich Dreyer	afd24385a8	fix formatting	12 years ago
Andrew Brown	a6583d3976	Add legacy adapters for file search	12 years ago
Andrew Brown	ac72828eae	Move to new namespace convention and add new result sub-classing	12 years ago
Bernhard Posselt	587a8df566	remove controller serializers	12 years ago
Bernhard Posselt	1d45239c65	adjust license headers to new mail address	12 years ago
Bernhard Posselt	80648da431	implement most of the basic stuff that was suggested in #8290	12 years ago
Thomas Müller	9c9dc276b7	move the private namespace OC into lib/private - OCP will stay in lib/public Conflicts: lib/private/vcategories.php	12 years ago
Thomas Müller	fde9cabe97	initial import of appframework	13 years ago
Bart Visscher	5bfe4adbaa	Whitespace cleanup	13 years ago
Thomas Tanghus	7f0c69eb0e	Added CRUDS permissions to the OCP namespace. Implements issue #345	13 years ago
Sam Tuke	8b01286a5d	Merged branch 'master'	13 years ago
Bart Visscher	0365f8fd01	Remove php close at end of file	14 years ago
Robin Appelman	7761765a4b	change licencing headers for sqlite3 driver	14 years ago
Robin Appelman	600219c8c0	sqlite3 driver for mdb2 the only problem that I found with it so far is that it gives a database locked error on login, the rest seems to work fine but more testing is required.	15 years ago
Jakob Sack	132695ceb1	Start of the refactoring. Commit is quite big because I forgot to use git right from the beginning. Sorry.	15 years ago
Martin T. H. Sandsmark	64d4d57615	fix permissions, start to implement private data api	16 years ago
Robin	ede1c64edd	port OC_DB to MDB2	16 years ago

14 Commits (4f31b7b9cc2dac060194de2c769b149a2ac861ba)