Lukas Reschke 2f87fb6b45 Add Clear-Site-Data header ...

This adds a Clear-Site-Data header to the logout response which will delete all relevant data in the caches which may contain potentially sensitive content.

See https://w3c.github.io/webappsec-clear-site-data/#header for the definition of the types.

Ref https://twitter.com/mikewest/status/877149667909406723

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

2017-06-20 19:46:10 +02:00

..

AvatarControllerTest.php

Check the mimetype before reading the content and catch exception

2016-10-18 16:22:20 +02:00

ChangePasswordControllerTest.php

Add bruteforce protection to changePersonalPassword

2017-04-18 17:55:51 +02:00

ClientFlowLoginControllerTest.php

Add tests for ClientFlowLoginController

2017-05-18 20:49:08 +02:00

ContactsMenuControllerTest.php

add contactsmenu popover

2017-04-26 09:26:53 +02:00

CssControllerTest.php

Automatic injection for CssController

2017-05-10 09:42:40 +02:00

JsControllerTest.php

Automatic injection for JsController

2017-05-10 09:42:15 +02:00

LoginControllerTest.php

Add Clear-Site-Data header

2017-06-20 19:46:10 +02:00

LostControllerTest.php

Disable the API endpoints as well

2017-05-11 17:03:57 +02:00

OCSControllerTest.php

Adjust existing bruteforce protection code

2017-04-14 13:42:40 +02:00

PreviewControllerTest.php

Add cache 1 day cache to preview endpoint

2016-11-03 14:00:33 +01:00

TwoFactorChallengeControllerTest.php

fix coding style and increase code coverage

2017-01-11 11:01:54 +01:00

UserControllerTest.php

Adds user controller tests

2016-12-30 13:26:26 +01:00