]> source.dussan.org Git - nextcloud-server.git/commit
projects / nextcloud-server.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 86da501) | patch
Set frame-ancestors to none if none are filled 24477/head
authorRoeland Jago Douma <roeland@famdouma.nl>
Tue, 17 Nov 2020 15:19:03 +0000 (16:19 +0100)
committerMorris Jobke <hey@morrisjobke.de>
Tue, 1 Dec 2020 21:23:13 +0000 (22:23 +0100)
commit3fb850940f0bd6337cef4b3712d34a288ea90820
treee9cf2e13eaef4065aaaa1ad7e25a8f34823eb848tree | snapshot
parent86da5013c802694d827ff0cb0880643b36aa23abcommit | diff
Set frame-ancestors to none if none are filled

frame-ancestors doesn't fall back to default-src. So when we apply a
very restricted CSP we should make sure to set it to 'none' and not
leave it empty.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
build/integration/sharing_features/sharing-v1.feature diff | blob | history
lib/public/AppFramework/Http/EmptyContentSecurityPolicy.php diff | blob | history
tests/lib/AppFramework/Controller/ControllerTest.php diff | blob | history
tests/lib/AppFramework/Http/DataResponseTest.php diff | blob | history
tests/lib/AppFramework/Http/EmptyContentSecurityPolicyTest.php diff | blob | history
tests/lib/AppFramework/Http/ResponseTest.php diff | blob | history
Nextcloud server, a safe home for all your data: https://github.com/nextcloud/server