wbrawner/server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
server/core/js
History
Lukas Reschke f2d63d3518 Disable automatic evaluation of responses 
If a response to a $.ajax() request returns a content type of "application/javascript"
JQuery would previously execute the response body. This is a pretty unexpected
behaviour and can result in a bypass of our Content-Security-Policy as well as
multiple unexpected XSS vectors.
2015-09-15 11:42:13 +02:00
..
tests Add apps unit test 2015-08-30 17:14:57 +02:00
apps.js Fix controls bar calculation 2015-08-28 12:23:57 +02:00
avatar.js Load avatar in header via PHP 2014-10-23 23:17:18 +02:00
backgroundjobs.js add admin documentation hints to Federated Cloud Sharing and cron 2015-04-09 12:07:05 +02:00
compatibility.js Scrutinizer cleanup 2014-06-02 21:09:41 +02:00
config.js Improved Javascript docs for JSDoc 2014-10-31 13:43:30 +01:00
config.php Fix regression 2015-08-24 17:38:32 +02:00
core.json Load backbone when running unit tests 2015-08-11 11:35:21 +02:00
eventsource.js Encode requesttoken 2015-02-16 20:28:30 +01:00
installation.js load showpassord.js conditionally in the template only if needed 2014-12-16 18:45:37 +01:00
jquery-showpassword.js Shows The Eye permanently in the Confirm Password field in Personal Settings - fix #5167 2013-10-12 12:42:23 +02:00
jquery.avatar.js Remove requesttoken for avatars 2015-08-23 16:49:12 +02:00
jquery.ocdialog.js Resize filepicker on window size change 2015-05-06 11:00:23 +02:00
js.js Disable automatic evaluation of responses 2015-09-15 11:42:13 +02:00
l10n.js Added ext storage mount options GUI 2015-03-26 11:21:03 +01:00
login.js show feedback spinner for log in process 2015-08-27 21:08:46 +02:00
lostpassword.js Use / as redirect location if webroot is set to an empty value 2014-11-21 15:38:36 +01:00
maintenance-check.js Use OC.webroot instead of calculating the URL 2015-05-11 17:01:57 +02:00
mimetype.js Javascript mimetype icon resolver 2015-07-06 16:32:10 +02:00
mimetypelist.js simpler style for filetype icons 2015-08-27 19:20:49 +02:00
multiselect.js use proper triangle for multiselect dropdowns as well 2015-09-03 00:35:09 +02:00
oc-backbone.js make available as OC.Backbone to avoid conflicts 2015-08-06 12:08:42 +02:00
oc-dialogs.js Move calls to Files.getMimeIcon to OC.MimeType.getIconUrl 2015-07-09 13:40:13 +02:00
oc-requesttoken.js Do not add sensitive request headers for cross domain requests 2015-09-15 11:42:13 +02:00
octemplate.js Scrutinizer cleanup 2014-06-02 21:09:41 +02:00
placeholder.js use normal font weight instead of bold for image placeholders 2015-05-22 03:26:30 +02:00
placeholders.js move to updated version of placeholder 2014-06-03 16:18:06 +02:00
setup.js Remove remainings of mssql 2015-07-29 18:19:31 +02:00
setupchecks.js Move remaining setupchecks to new fomat 2015-08-18 14:42:57 +02:00
share.js fix share icons of shared items being placed off on mobile 2015-08-26 10:27:55 +02:00
singleselect.js Do not close container/slider when clicking on single select field 2014-08-15 12:44:00 +02:00
tags.js Scrutinizer cleanup 2014-06-02 21:09:41 +02:00
update-notification.js Use OC.Notification for update notifications 2015-05-03 17:26:03 +02:00
update.js Keep update page when there are warnings 2015-07-07 13:38:24 +02:00
visitortimezone.js send browsers timezone back tp the server on login 2014-09-22 14:01:45 +02:00