131 Commits (cb73fe26b818cfdb8fbf07116cd8e970a9cdc708)

Author	SHA1	Message	Date
John Molakvoæ (skjnldsv)	a1aaaaa0c8	Update and fix theming images ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	4 years ago
MichaIng	ea0e45d81e	Remove legacy Internet Explorer headers ... X-UA-Compatible and X-Download-Options headers are interpreted or relevant for Internet Explorer only. With the deprecation of Internet Explorer support in Nextcloud 20 and planned support removal already in Nextcloud 22, these became obsolete and are hereby removed, including their removal from setup checks. Signed-off-by: MichaIng <micha@dietpi.com>	4 years ago
Christoph Wurst	caff1023ea	Format control structures, classes, methods and function ... To continue this formatting madness, here's a tiny patch that adds unified formatting for control structures like if and loops as well as classes, their methods and anonymous functions. This basically forces the constructs to start on the same line. This is not exactly what PSR2 wants, but I think we can have a few exceptions with "our" style. The starting of braces on the same line is pracrically standard for our code. This also removes and empty lines from method/function bodies at the beginning and end. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	44577e4345	Remove trailing and in between spaces ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Julius Härtl	3e081c43d9	Only add the app-itunes-app tag if the id is set ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Gary Kim	72b8083c11	Remove precomposed from apple-touch-icon-precomposed ... Signed-off-by: Gary Kim <gary@garykim.dev>	7 years ago
Dominik Wasielewski	782e828889	Remove unnecessary meta tags. ... Signed-off-by: Dominik Wasielewski <d-wasi@web.de>	7 years ago
Joas Schilling	08688af275	Fix OC.getCurrentUser() on guest pages ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Roeland Jago Douma	f30877ea7c	Provide initial state ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	7b848368d5	Add locale to templates ... It was already added to the user template but we should add it to all templates. Else apps that want the locale but use special templating (hi richdocuments!) will fail. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Jan-Christoph Borchardt	0f9ba852bc	Fix form labels and main landmark on log in page ... Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>	8 years ago
Jan-Christoph Borchardt	1c00f82ea5	Do not restrict zooming in ... Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>	8 years ago
Ralph Slooten	be42df8e48	Referrer fix (no-referrer) ... Blocking referrer information should be done with "no-referrer" and not "never". See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy Signed-off-by: Ralph Slooten <axllent@gmail.com>	8 years ago
Morris Jobke	a661f043e1	Remove unneeded semicolon and parentheses ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
John Molakvoæ (skjnldsv)	21fbcba68d	Removed unwanted and unused spacer ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
Julius Härtl	699c64c750	Add manifest.json to the login page ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Morris Jobke	585e5c6ea5	Logo claim is not used anymore ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Michael Letzgus	0d320fba4b	Streamline templates, more DRY ... Use Unified function to emit <link> tags for css loading, obey "Don't Repeat Yourself" ;-) (Next step might by to combine this with the emit <script> function (even more DRY?) AND move all this to a better place?) Signed-off-by: Michael Letzgus <michaelletzgus@users.noreply.github.com>	9 years ago
Michael Letzgus	fb9f13d4c1	Make page loading faster by deferred script loading: ... * Create generalized function for emmitting <script defer src=""> tags to templates * Remove type attribute from inline_js * Add defer attribute to external <script> tags Signed-off-by: Michael Letzgus <michaelletzgus@users.noreply.github.com>	9 years ago
Lukas Reschke	26f7a3b462	Check if Nextcloud is installed ... Fixes https://github.com/nextcloud/server/issues/4735 Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Robin Appelman	c50b7addc7	smaller max logo sizes and cleaner code ... Signed-off-by: Robin Appelman <robin@icewind.nl>	9 years ago
Robin Appelman	fa52f906e3	show non landscape icons bigger on the login page ... Signed-off-by: Robin Appelman <robin@icewind.nl>	9 years ago
Jan-Christoph Borchardt	9a75714c22	rename confusing getMailHeaderColor to getColorPrimary, ref #3491 ... Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>	9 years ago
Roeland Jago Douma	1ae56b054b	Moving the inline js before the CSS ... This allows browsers to do smarted parallel downloads Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Jan-Christoph Borchardt	ea517b489f	use theming colors for favicon on macOS ... Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>	9 years ago
Roeland Jago Douma	6dbe417c51	Inlince oc.js if possible! ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Lukas Reschke	38b3ac8213	Add ContentSecurityPolicyNonceManager ... Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Lukas Reschke	9e6634814e	Add support for CSP nonces ... CSP nonces are a feature available with CSP v2. Basically instead of saying "JS resources from the same domain are ok to be served" we now say "Ressources from everywhere are allowed as long as they add a `nonce` attribute to the script tag with the right nonce. At the moment the nonce is basically just a `<?php p(base64_encode($_['requesttoken'])) ?>`, we have to decode the requesttoken since `:` is not an allowed value in the nonce. So if somebody does on their own include JS files (instead of using the `addScript` public API, they now must also include that attribute.) IE does currently not implement CSP v2, thus there is a whitelist included that delivers the new CSP v2 policy to newer browsers. Check http://caniuse.com/#feat=contentsecuritypolicy2 for the current browser support list. An alternative approach would be to just add `'unsafe-inline'` as well as `'unsafe-inline'` is ignored by CSPv2 when a nonce is set. But this would make this security feature unusable at all in IE. Not worth it at the moment IMO. Implementing this offers the following advantages: 1. **Security:** As we host resources from the same domain by design we don't have to worry about 'self' anymore being in the whitelist 2. **Performance:** We can move oc.js again to inline JS. This makes the loading way quicker as we don't have to load on every load of a new web page a blocking dynamically non-cached JavaScript file. If you want to toy with CSP see also https://csp-evaluator.withgoogle.com/ Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Hendrik Leppelsack	c47833718f	remove svg classes	10 years ago
Hendrik Leppelsack	e5d8726859	remove ie8+9 support	10 years ago
Daniel Aleksandersen	7a45f05ed5	Stupid clients only literally understand rel="icon" ... rel="shortcut icon" hasn’t been relevant in years, isn’t in any standards, and causes problems for simple pattern matching clients. https://www.w3.org/TR/html/links.html#linkTypes	10 years ago
Hendrik Leppelsack	99b9ec41c1	support print stylesheets	10 years ago
maprambo	edb1fee610	Added Safari tabbed pin icon ... Added the necessary code and a black and inverted version of the favicon/ touch icon in svg format	10 years ago
Morris Jobke	069ed71dbe	Add favicon for IE 8+	10 years ago
Lukas Reschke	436c149fbb	Prevent referer from being sent ... Nice hardening for enhanced privacy. Especially useful when using embedded viewers such as files_pdfviewer.	11 years ago
Jan-Christoph Borchardt	0b27bcba76	add theme-color for better Android browser integration	11 years ago
Volker E	599ee5ce4e	fixing #15023, getting comments out of HTML output	11 years ago
Volker E	0d0c73cf2b	fixing #15011 by adding ARIA roles where distinct	11 years ago
Volker E	790324b313	addressing #14984 removing redundant type attributes	11 years ago
Volker E	4c46d0c46c	addressing #14983 obsolete Google Chrome Frame	11 years ago
Volker E	6ad76b5cc2	addressing #14982 self-closing tags ending slash doesn't have a purpose & should be removed	11 years ago
Volker E	25b77159c4	adressing #14979 meta charset declaration should be first in head	11 years ago
Volker E	f3cd552797	addressing #14978 - remove html root classes targeting IE6/IE7	11 years ago
Lode Hoste	27b35500a7	Disable application-specific favicons for non-user pages	11 years ago
Joas Schilling	4172ba48d4	Deduplicate template code and do not translate the links	11 years ago
Lukas Reschke	b432ea29c9	Add `rel="noreferrer"` where possible and switch to HTTPS ... Just to follow good practise and prevent some automated scanners to complain about "Cross-domain Referer leakage".	11 years ago
Lode Hoste	96f81961ed	Allow application-specific favicons	11 years ago
Jan-Christoph Borchardt	ea548cdaaa	fix accessibility of logos	11 years ago
Jan-Christoph Borchardt	45c6ec8582	introduce h1, use either ownCloud name or current app name	11 years ago
Lukas Reschke	510d0b2cf3	Fix the "addHeader($tag, $attributes, $text)" methods to not ignore the $text parameter ... Also support closing tags with no text content given Conflicts: lib/private/template.php	11 years ago