wbrawner/server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
server/lib/public/AppFramework/Http
History
Roeland Jago Douma 7276735eb4
Set empty CSP by default 
For #14179

By default responses should have the strictest (and simplest) CSP
possible. Only template responses should require an actual CSP.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-04-16 14:09:39 +02:00
..
Template Add since tags 2018-04-05 13:18:17 +02:00
ContentSecurityPolicy.php Set default frame-ancestors to 'self' 2019-01-08 15:36:40 +01:00
DataDisplayResponse.php Set empty CSP by default 2019-04-16 14:09:39 +02:00
DataDownloadResponse.php Change @georgehrke's email 2017-11-06 20:38:59 +01:00
DataResponse.php Set empty CSP by default 2019-04-16 14:09:39 +02:00
DownloadResponse.php Set empty CSP by default 2019-04-16 14:09:39 +02:00
EmptyContentSecurityPolicy.php CSP: set nonce for iframes 2019-03-16 20:20:03 +01:00
FileDisplayResponse.php Set empty CSP by default 2019-04-16 14:09:39 +02:00
ICallbackResponse.php Update license headers 2017-11-06 16:56:19 +01:00
IOutput.php Update license headers 2017-11-06 16:56:19 +01:00
JSONResponse.php Set empty CSP by default 2019-04-16 14:09:39 +02:00
NotFoundResponse.php Set empty CSP by default 2019-04-16 14:09:39 +02:00
OCSResponse.php Set empty CSP by default 2019-04-16 14:09:39 +02:00
RedirectResponse.php Set empty CSP by default 2019-04-16 14:09:39 +02:00
RedirectToDefaultAppResponse.php Allow apps to redirect to the default app 2019-03-01 09:19:46 +01:00
Response.php Set empty CSP by default 2019-04-16 14:09:39 +02:00
StandaloneTemplateResponse.php Add StandaloneTemplateResponse 2019-02-06 11:26:18 +01:00
StreamResponse.php Set empty CSP by default 2019-04-16 14:09:39 +02:00
StrictContentSecurityPolicy.php Add stricter CSPs 2018-06-13 14:47:57 +02:00
StrictEvalContentSecurityPolicy.php Disallow eval on the StrictEvalCSP 2018-07-11 21:12:36 +02:00
StrictInlineContentSecurityPolicy.php Add stricter CSPs 2018-06-13 14:47:57 +02:00
TemplateResponse.php Set empty CSP by default 2019-04-16 14:09:39 +02:00
ZipResponse.php Set empty CSP by default 2019-04-16 14:09:39 +02:00