Roeland Jago Douma 7276735eb4 Set empty CSP by default ...

For #14179

By default responses should have the strictest (and simplest) CSP
possible. Only template responses should require an actual CSP.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

2019-04-16 14:09:39 +02:00

..

ContentSecurityPolicyTest.php

Set default frame-ancestors to 'self'

2019-01-08 15:36:40 +01:00

DataResponseTest.php

Set empty CSP by default

2019-04-16 14:09:39 +02:00

DispatcherTest.php

Fix tests

2018-02-21 10:55:52 +01:00

DownloadResponseTest.php

Move tests/ to PSR-4 (#24731)

2016-05-20 15:38:20 +02:00

EmptyContentSecurityPolicyTest.php

Add report-uri to CSP

2018-10-21 13:38:32 +02:00

FileDisplayResponseTest.php

Add FileDisplayResponse

2016-09-05 15:09:54 +02:00

HttpTest.php

Move tests/ to PSR-4 (#24731)

2016-05-20 15:38:20 +02:00

JSONResponseTest.php

Remove not needed 3rdparty app disabling during upgrade for PHP 5.x

2018-01-19 14:00:27 +01:00

OCSResponseTest.php

Move tests/ to PSR-4 (#24731)

2016-05-20 15:38:20 +02:00

OutputTest.php

add tests for http/output

2016-11-16 15:30:37 +01:00

PublicTemplateResponseTest.php

Add test for PublicTemplateResponse

2018-02-27 12:25:53 +01:00

RedirectResponseTest.php

Move tests/ to PSR-4 (#24731)

2016-05-20 15:38:20 +02:00

RequestStream.php

Move tests/ to PSR-4 (#24731)

2016-05-20 15:38:20 +02:00

RequestTest.php

Only trust the X-FORWARDED-HOST header for trusted proxies

2018-12-17 15:54:45 +01:00

ResponseTest.php

Set empty CSP by default

2019-04-16 14:09:39 +02:00

StreamResponseTest.php

Fix phpunit-5.4 wargning

2016-07-11 08:50:07 +02:00

TemplateResponseTest.php

Remove deprecated core API

2018-01-15 17:54:50 +01:00