nextcloud-server

Commit Graph

Author	SHA1	Message	Date
Roeland Jago Douma	35db32f504	Add deprecation warning Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Roeland Jago Douma	c40fe8b819	Do not enforce the parent constructor of response to be called If there is no policy set we just take the default empty ones. That way no obscure errors get thrown if the constructor is not called. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Roeland Jago Douma	c4cafae884	frame-src doesn't respect the nonce attribute Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Roeland Jago Douma	b8c5008acf	Add feature policy header This adds the events and the classes to modify the feature policy. It also adds a default restricted feature policy. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Roeland Jago Douma	f94ee72507	Add form-action CSP element Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	cd243b0876	No need to have these classes we tighten the default CSP from time to time Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	7276735eb4	Set empty CSP by default For #14179 By default responses should have the strictest (and simplest) CSP possible. Only template responses should require an actual CSP. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	4d8e1f6c67	CSP: set nonce for iframes This for now uses the jsNonce. That way we can easily backport it. For 17 I will fix it properly. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Joas Schilling	3203d3e806	Allow apps to redirect to the default app Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Morris Jobke	94b1b1593b	Remove public interface that was only needed for testing Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Michael Weimann	bf1253cb49	Implement guest avatar endpoint Signed-off-by: Michael Weimann <mail@michael-weimann.eu>	7 years ago
Roeland Jago Douma	b68567e9ba	Add StandaloneTemplateResponse This can be used by pages that do not have the full Nextcloud UI. So notifications etc do not load there. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	d182037bce	Emit to load additionalscripts Fixes #13662 This will fire of an event after a Template Response has been returned. There is an event for the generic loading and one when logged in. So apps can chose to load only on loged in pages. This is a more generic approach than the files app event. As some things we might want to load on other pages as well besides the files app. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	ad676c0102	Set default frame-ancestors to 'self' For #13042 Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	64244e1a4f	CSP: Allow fonts to be provided in data Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	58345e02d2	Basic CSP no longer deprecated Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	579822b6a5	Add report-uri to CSP Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	5b61ef9213	Disallow unsafe-eval by default Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Morris Jobke	bcbffdb644	Add PHPDoc Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Roeland Jago Douma	7d9052d4b9	fixup! Add fix response Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	a891f42a5d	fixup! Add fix response Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Jakob Sack	a9fa220e68	Add fix response implements #7589	7 years ago
Roeland Jago Douma	8354c50911	Deprecate the childSrc functions Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	c8fe4b4fc8	Add workerSrc to CSP Fixes #11035 Since the child-src directive is deprecated (we should kill it at some point) we need to have the proper worker-src available Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	c21cee248c	Disallow eval on the StrictEvalCSP Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	b38fa573e1	Add stricter CSPs * Deprecate our default CSP * Add strict CSP that is always our strictest setting * Add strict eval CSP (disable unsafe-eval) * Add strict inline CSP (disables inline styles) This is just to move forward and have a incremental improvement of our CSP Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	a34495933e	Move caching logic to response This avoids having to do it at all the places we want cached responses. We can't inject the ITimeFactor without breaking public API. However we can perfectly overwrite the service (resulting in the same testable effect). Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Julius Härtl	6ded1c46b7	Add since tags Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	2e60f91ab1	Move external share saving to template Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	30e76f9f14	Add footer to public page template Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	eb19899f8e	Move common menu templates to public API Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	36563d4a4b	Remove setters Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	9cf49873fa	Rework array handling to avoid phan error Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	2b6c00fc0f	Add id to list element Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	7cd0340366	Sort menu by priority Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	038aad73c7	Add missing phpdoc for public API Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	4f83462f67	Add phpdoc, typehints and sanitize HTML Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	4f78980fad	Add menu item abstraction Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	0655df09d6	Pass template parameters to parent template Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Roeland Jago Douma	5825c27a12	Make sure that render always returns a string Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Morris Jobke	31c5c2a592	Change @georgehrke's email Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	0eebff152a	Update license headers Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Julius Härtl	4cfa1c66b8	Doc: Fix phpDoc issues Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Roeland Jago Douma	87e10f9e6a	OC_OCS_Response is deprecated Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Thomas Citharel	eb51c46549	fix typo and set @since properly Signed-off-by: Thomas Citharel <tcit@tcit.fr>	8 years ago
Thomas Citharel	ecf347bd1a	Add CSP frame-ancestors support Didn't set the @since annotation yet. Signed-off-by: Thomas Citharel <tcit@tcit.fr>	8 years ago
Lukas Reschke	dfd8125aeb	Replace wrong PHPDocs Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Lukas Reschke	f22ab3e665	Add metadata to \OCP\AppFramework\Http\Response::throttle Fixes https://github.com/nextcloud/server/issues/5891 Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Roeland Jago Douma	361d2badd8	Some phpstorm inspection fixes Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Morris Jobke	c54a59d51e	Remove unused use statements Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago

1 2

66 Commits (4f31b7b9cc2dac060194de2c769b149a2ac861ba)