58 Commits (5cd1880daa048a685da689c7f41a2e50486494de)

Author	SHA1	Message	Date
Joas Schilling	9de00f3d24	This is 22 ... Signed-off-by: Joas Schilling <coding@schilljs.com>	5 years ago
Christoph Wurst	d9015a8c94	Format code to a single space around binary operators ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Julius Härtl	aa95b3d71b	Add occ command to set theming values ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	5 years ago
Joas Schilling	48761481eb	Bump versions ... Signed-off-by: Joas Schilling <coding@schilljs.com>	5 years ago
Morris Jobke	340cd81d2f	Use IBootstrap for the app theming ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	6 years ago
Roeland Jago Douma	3f1b6e2ce9	Move theming js to initial state ... A bit more elegant. Plus it will allow us to also write a proper @nextcloud/theming package. To make life easier down the line for all. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl> Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Joas Schilling	af1dd9f152	Bump app versions and requirements ... Signed-off-by: Joas Schilling <coding@schilljs.com>	6 years ago
Christoph Wurst	cb057829f7	Update license headers for 19 ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	bcd13296de	Make sure every file ends with an empty newline ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	1a9330cd69	Update the license headers for Nextcloud 19 ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	b80ebc9674	Use the short array syntax, everywhere ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Roeland Jago Douma	8728eab9d7	Fix app updates ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Christoph Wurst	5bf3d1bb38	Update license headers ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Robin Appelman	ef2fb51065	remove missed manual Application instance constructions ... Signed-off-by: Robin Appelman <robin@icewind.nl>	6 years ago
Roeland Jago Douma	04ef434af0	Development is 18 now! ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Joas Schilling	4c19b3b2c6	Bump versions of server and the requirements of apps ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Roeland Jago Douma	8b21c5e64d	Revert "Do not register unexisting section" ... This reverts commit 24354bde1d.	7 years ago
Joas Schilling	24354bde1d	Do not register unexisting section ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Joas Schilling	1751c28c28	Bump versions of server and the requirements of apps ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Joas Schilling	47cc5e5895	Update version requirements and versions of shipped apps ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Julius Härtl	805f503814	Load theming app css as well if legacy theme is enabled ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	272b392cac	Move to more generic image handling and add extra images ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Joas Schilling	f095001e4b	Fix info.xml files of shipped apps ... Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Julius Härtl	5e325730d6	Remove theming migration ... Those images are alredy migrated after the instance has been updated to NC12 Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Roeland Jago Douma	db411f8771	Bump apps ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Julius Härtl	7a812aa0e1	Theming: bump version to retrigger icon generation ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Morris Jobke	0eebff152a	Update license headers ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Julius Härtl	770aae42f6	Add themed manifest.json to theming app ... Signed-off-by: Julius Haertl <jus@bitgrid.net>	8 years ago
Julius Härtl	ce5ad7e7f4	Prefer custom theme over theming app ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	9 years ago
Joas Schilling	bc8fbc1a67	Bump app versions as well ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Joas Schilling	fdfe8f7f15	Adjust version requirement ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Julius Haertl	60d77ceccb	Add repair step to move existing theming images ... Signed-off-by: Julius Haertl <jus@bitgrid.net>	9 years ago
Joas Schilling	edec1fafe7	Update app versions and requirements ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Julius Haertl	78de213b85	Sanitize input and small fixes ... Signed-off-by: Julius Haertl <jus@bitgrid.net>	9 years ago
Julius Haertl	c7adcb85ae	Theming: Fix default parameters in icon routes ... Signed-off-by: Julius Haertl <jus@bitgrid.net>	9 years ago
Julius Haertl	2d65b8c600	Theming: Add favicon-touch and fix icon creation with non svg images ... Signed-off-by: Julius Haertl <jus@bitgrid.net>	9 years ago
Julius Haertl	b3eab7db01	Theming: Add dynamic icon and favicon endpoints ... Signed-off-by: Julius Haertl <jus@bitgrid.net>	9 years ago
Lukas Reschke	bc1008ac38	Use 11.0 instead 9.2 ... As discussed we're changing the version from 9.2 to 11.0 to make some more sense. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Lukas Reschke	38b3ac8213	Add ContentSecurityPolicyNonceManager ... Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Lukas Reschke	9e6634814e	Add support for CSP nonces ... CSP nonces are a feature available with CSP v2. Basically instead of saying "JS resources from the same domain are ok to be served" we now say "Ressources from everywhere are allowed as long as they add a `nonce` attribute to the script tag with the right nonce. At the moment the nonce is basically just a `<?php p(base64_encode($_['requesttoken'])) ?>`, we have to decode the requesttoken since `:` is not an allowed value in the nonce. So if somebody does on their own include JS files (instead of using the `addScript` public API, they now must also include that attribute.) IE does currently not implement CSP v2, thus there is a whitelist included that delivers the new CSP v2 policy to newer browsers. Check http://caniuse.com/#feat=contentsecuritypolicy2 for the current browser support list. An alternative approach would be to just add `'unsafe-inline'` as well as `'unsafe-inline'` is ignored by CSPv2 when a nonce is set. But this would make this security feature unusable at all in IE. Not worth it at the moment IMO. Implementing this offers the following advantages: 1. **Security:** As we host resources from the same domain by design we don't have to worry about 'self' anymore being in the whitelist 2. **Performance:** We can move oc.js again to inline JS. This makes the loading way quicker as we don't have to load on every load of a new web page a blocking dynamically non-cached JavaScript file. If you want to toy with CSP see also https://csp-evaluator.withgoogle.com/ Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Joas Schilling	1d834bd49e	Add theming information to capabilities for the client	9 years ago
Arthur Schiwon	36c1b7eb31	adjust Theming app	10 years ago
Julius Haertl	5f4e88ef6c	Theming: Add OCA.Theming Js for app interaction	10 years ago
Joas Schilling	dae6432ae7	Increment the versions and adjust the capitilization	10 years ago
Joas Schilling	2de4112176	Update routes.php	10 years ago
Joas Schilling	eec6986d7c	Use public API preferable	10 years ago
Joas Schilling	7400ff05ac	Also increase the min version	10 years ago
Robin Appelman	6062b6365b	bumb compatible app versions for core apps	10 years ago
Joas Schilling	813f0a0f40	Fix apps/	10 years ago
Joas Schilling	86129a8b88	Increase app versions	10 years ago