Lukas Reschke 809ff5ac95 Add public API to give developers the possibility to adjust the global CSP defaults Allows to inject something into the default content policy. This is for example useful when you're injecting Javascript code into a view belonging to another controller and cannot modify its Content-Security-Policy itself. Note that the adjustment is only applied to applications that use AppFramework controllers. To use this from your `app.php` use `\OC::$server->getContentSecurityPolicyManager()->addDefaultPolicy($policy)`, $policy has to be of type `\OCP\AppFramework\Http\ContentSecurityPolicy`. To test this add something like the following into an `app.php` of any enabled app: ``` $manager = \OC::$server->getContentSecurityPolicyManager(); $policy = new \OCP\AppFramework\Http\ContentSecurityPolicy(false); $policy->addAllowedFrameDomain('asdf'); $policy->addAllowedScriptDomain('yolo.com'); $policy->allowInlineScript(false); $manager->addDefaultPolicy($policy); $policy = new \OCP\AppFramework\Http\ContentSecurityPolicy(false); $policy->addAllowedFontDomain('yolo.com'); $manager->addDefaultPolicy($policy); $policy = new \OCP\AppFramework\Http\ContentSecurityPolicy(false); $policy->addAllowedFrameDomain('banana.com'); $manager->addDefaultPolicy($policy); ``` If you now open the files app the policy should be: ``` Content-Security-Policy:default-src 'none';script-src yolo.com 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data: blob:;font-src yolo.com 'self';connect-src 'self';media-src 'self';frame-src asdf banana.com 'self' ```		10 years ago
.idea	Add newline that was removed by `15be763d46`	12 years ago
3rdparty@177daad35d	[3rdparty] Bump symfony/process to 2.8.1	11 years ago
apps	Fix OCS unit tests after two share merges	10 years ago
build	Add intergration test for shared_with me and group shares	11 years ago
config	Allow custom implementation of system tag managers	11 years ago
core	Fix share default expiration date calculation	10 years ago
l10n	Merge pull request #19398 from owncloud/fix-tranifex	11 years ago
lib	Add public API to give developers the possibility to adjust the global CSP defaults	10 years ago
ocs	Move findLanguage() and setLanguageFromRequest() to factory	10 years ago
ocs-provider	Reference v2 in the provider list	11 years ago
resources	Sync certificates with upstream	11 years ago
settings	Merge pull request #21741 from owncloud/l10n-improvements	10 years ago
tests	Add public API to give developers the possibility to adjust the global CSP defaults	10 years ago
themes	update example theme favicon	11 years ago
.bowerrc	…
.gitignore	Added system tags GUI in sidebar	11 years ago
.gitmodules	…
.htaccess	Add X-Download-Options and X-Permitted-Cross-Domain-Policies	11 years ago
.jshintrc	enable laxbreak option in jshintrc to comply with our coding guide lines	12 years ago
.mailmap	Correct mailmap for Robin McCorkell to robin@mccorkell.me.uk	11 years ago
.mention-bot	Merge pull request #21970 from zander/mentionbot	10 years ago
.scrutinizer.yml	Revert "Specify PHP 5.4 as version for scrutinizer"	11 years ago
.tag	…
.travis.yml	Adding integration tests for CalDAV	11 years ago
.user.ini	Also set output_buffering in .user.ini to 0	11 years ago
AUTHORS	Happy new year!	11 years ago
CONTRIBUTING.md	Replace list of apps with a link	11 years ago
COPYING-AGPL	…
COPYING-README	…
README.md	Update README.md	11 years ago
autotest-external.sh	script shall exit with error in case the start file has issues - fixes #20798	11 years ago
autotest-hhvm.sh	Combine autotest-hhvm.sh with autotest.sh	11 years ago
autotest-js.sh	Use a universal shebang	11 years ago
autotest.cmd	Restore the development config after running the tests	12 years ago
autotest.sh	Make autotest.sh able to output proper coverage again	11 years ago
bower.json	Add davidchambers/base64 JS library	11 years ago
buildjsdocs.sh	Added OC.Files.Client Webdav-based files client	11 years ago
console.php	Happy new year!	11 years ago
cron.php	Happy new year!	11 years ago
db_structure.xml	Merge pull request #18531 from owncloud/ext-user-credentials	11 years ago
index.html	…
index.php	Happy new year!	11 years ago
issue_template.md	Add question about code signing status	11 years ago
occ	Use a more universal shebang	12 years ago
public.php	Happy new year!	11 years ago
remote.php	Move findLanguage() and setLanguageFromRequest() to factory	10 years ago
robots.txt	…
status.php	Happy new year!	11 years ago
version.php	Increase version due to new tables	11 years ago

README.md

Unescape Escape

ownCloud Core

ownCloud gives you freedom and control over your own data. A personal cloud which runs on your own server.

Why is this so awesome?

📁 Access your Data You can store your files, contacts, calendars and more on a server of your choosing.
📦 Sync your Data You keep your files, contacts, calendars and more synchronized amongst your devices.
🔄 Share your Data You share your data with others, and give them access to your latest photo galleries, your calendar or anything else you want them to see.
🚀 Expandable with dozens of Apps ...like Calendar, Contacts, Mail or News.
☁️ All Benefits of the Cloud ...on your own Server.
🔒 Encryption You can encrypt data in transit with secure https connections. You can enable the encryption app to encrypt data on storage for improved security and privacy.
...