Roeland Jago Douma 7276735eb4 Set empty CSP by default ... For #14179 By default responses should have the strictest (and simplest) CSP possible. Only template responses should require an actual CSP. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>		2019-04-16 14:09:39 +02:00
..
ContentSecurityPolicyTest.php	Set default frame-ancestors to 'self'	2019-01-08 15:36:40 +01:00
DataResponseTest.php	Set empty CSP by default	2019-04-16 14:09:39 +02:00
DispatcherTest.php	Fix tests	2018-02-21 10:55:52 +01:00
DownloadResponseTest.php
EmptyContentSecurityPolicyTest.php	Add report-uri to CSP	2018-10-21 13:38:32 +02:00
FileDisplayResponseTest.php
HttpTest.php
JSONResponseTest.php	Remove not needed 3rdparty app disabling during upgrade for PHP 5.x	2018-01-19 14:00:27 +01:00
OCSResponseTest.php
OutputTest.php
PublicTemplateResponseTest.php	Add test for PublicTemplateResponse	2018-02-27 12:25:53 +01:00
RedirectResponseTest.php
RequestStream.php
RequestTest.php	Only trust the X-FORWARDED-HOST header for trusted proxies	2018-12-17 15:54:45 +01:00
ResponseTest.php	Set empty CSP by default	2019-04-16 14:09:39 +02:00
StreamResponseTest.php
TemplateResponseTest.php	Remove deprecated core API	2018-01-15 17:54:50 +01:00