averello/nextcloud-server-mirror
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-06-29 12:24:50 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
0263821010d1394de6bbcefa6e78e7fab385cda0
nextcloud-server-mirror/lib/public/AppFramework/Http
T
History
Roeland Jago Douma 7276735eb4 Set empty CSP by default 
For #14179

By default responses should have the strictest (and simplest) CSP
possible. Only template responses should require an actual CSP.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-04-16 14:09:39 +02:00
..
Template
Add since tags
2018-04-05 13:18:17 +02:00
ContentSecurityPolicy.php
Set default frame-ancestors to 'self'
2019-01-08 15:36:40 +01:00
DataDisplayResponse.php
Set empty CSP by default
2019-04-16 14:09:39 +02:00
DataDownloadResponse.php
Change @georgehrke's email
2017-11-06 20:38:59 +01:00
DataResponse.php
Set empty CSP by default
2019-04-16 14:09:39 +02:00
DownloadResponse.php
Set empty CSP by default
2019-04-16 14:09:39 +02:00
EmptyContentSecurityPolicy.php
CSP: set nonce for iframes
2019-03-16 20:20:03 +01:00
FileDisplayResponse.php
Set empty CSP by default
2019-04-16 14:09:39 +02:00
ICallbackResponse.php
Update license headers
2017-11-06 16:56:19 +01:00
IOutput.php
Update license headers
2017-11-06 16:56:19 +01:00
JSONResponse.php
Set empty CSP by default
2019-04-16 14:09:39 +02:00
NotFoundResponse.php
Set empty CSP by default
2019-04-16 14:09:39 +02:00
OCSResponse.php
Set empty CSP by default
2019-04-16 14:09:39 +02:00
RedirectResponse.php
Set empty CSP by default
2019-04-16 14:09:39 +02:00
RedirectToDefaultAppResponse.php
Allow apps to redirect to the default app
2019-03-01 09:19:46 +01:00
Response.php
Set empty CSP by default
2019-04-16 14:09:39 +02:00
StandaloneTemplateResponse.php
Add StandaloneTemplateResponse
2019-02-06 11:26:18 +01:00
StreamResponse.php
Set empty CSP by default
2019-04-16 14:09:39 +02:00
StrictContentSecurityPolicy.php
Add stricter CSPs
2018-06-13 14:47:57 +02:00
StrictEvalContentSecurityPolicy.php
Disallow eval on the StrictEvalCSP
2018-07-11 21:12:36 +02:00
StrictInlineContentSecurityPolicy.php
Add stricter CSPs
2018-06-13 14:47:57 +02:00
TemplateResponse.php
Set empty CSP by default
2019-04-16 14:09:39 +02:00
ZipResponse.php
Set empty CSP by default
2019-04-16 14:09:39 +02:00