nextcloud

Графік комітів

Автор	SHA1	Повідомлення	Дата
Gary Kim	72b8083c11	Remove precomposed from apple-touch-icon-precomposed Signed-off-by: Gary Kim <gary@garykim.dev>	5 роки тому
Dominik Wasielewski	782e828889	Remove unnecessary meta tags. Signed-off-by: Dominik Wasielewski <d-wasi@web.de>	5 роки тому
Roeland Jago Douma	f30877ea7c	Provide initial state Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 роки тому
Julius Härtl	b4ea19c981	Fix base layout content padding Signed-off-by: Julius Härtl <jus@bitgrid.net>	6 роки тому
John Molakvoæ (skjnldsv)	88db07d28e	Really cleanup the content-wrapper Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	6 роки тому
John Molakvoæ (skjnldsv)	0274507cb1	Acceptance and mobile navigation fixes Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	6 роки тому
Roeland Jago Douma	7b848368d5	Add locale to templates It was already added to the user template but we should add it to all templates. Else apps that want the locale but use special templating (hi richdocuments!) will fail. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 роки тому
Jan-Christoph Borchardt	1c00f82ea5	Do not restrict zooming in Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>	6 роки тому
Ralph Slooten	be42df8e48	Referrer fix (no-referrer) Blocking referrer information should be done with "no-referrer" and not "never". See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy Signed-off-by: Ralph Slooten <axllent@gmail.com>	6 роки тому
Morris Jobke	a661f043e1	Remove unneeded semicolon and parentheses Signed-off-by: Morris Jobke <hey@morrisjobke.de>	6 роки тому
Michael Letzgus	0d320fba4b	Streamline templates, more DRY Use Unified function to emit <link> tags for css loading, obey "Don't Repeat Yourself" ;-) (Next step might by to combine this with the emit <script> function (even more DRY?) AND move all this to a better place?) Signed-off-by: Michael Letzgus <michaelletzgus@users.noreply.github.com>	7 роки тому
Michael Letzgus	fb9f13d4c1	Make page loading faster by deferred script loading: * Create generalized function for emmitting <script defer src=""> tags to templates * Remove type attribute from inline_js * Add defer attribute to external <script> tags Signed-off-by: Michael Letzgus <michaelletzgus@users.noreply.github.com>	7 роки тому
Jan-Christoph Borchardt	9a75714c22	rename confusing getMailHeaderColor to getColorPrimary, ref #3491 Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>	7 роки тому
Roeland Jago Douma	1ae56b054b	Moving the inline js before the CSS This allows browsers to do smarted parallel downloads Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 роки тому
Jan-Christoph Borchardt	ea517b489f	use theming colors for favicon on macOS Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>	7 роки тому
Roeland Jago Douma	6dbe417c51	Inlince oc.js if possible! Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 роки тому
Lukas Reschke	38b3ac8213	Add ContentSecurityPolicyNonceManager Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	7 роки тому
Lukas Reschke	9e6634814e	Add support for CSP nonces CSP nonces are a feature available with CSP v2. Basically instead of saying "JS resources from the same domain are ok to be served" we now say "Ressources from everywhere are allowed as long as they add a `nonce` attribute to the script tag with the right nonce. At the moment the nonce is basically just a `<?php p(base64_encode($_['requesttoken'])) ?>`, we have to decode the requesttoken since `:` is not an allowed value in the nonce. So if somebody does on their own include JS files (instead of using the `addScript` public API, they now must also include that attribute.) IE does currently not implement CSP v2, thus there is a whitelist included that delivers the new CSP v2 policy to newer browsers. Check http://caniuse.com/#feat=contentsecuritypolicy2 for the current browser support list. An alternative approach would be to just add `'unsafe-inline'` as well as `'unsafe-inline'` is ignored by CSPv2 when a nonce is set. But this would make this security feature unusable at all in IE. Not worth it at the moment IMO. Implementing this offers the following advantages: 1. Security: As we host resources from the same domain by design we don't have to worry about 'self' anymore being in the whitelist 2. Performance: We can move oc.js again to inline JS. This makes the loading way quicker as we don't have to load on every load of a new web page a blocking dynamically non-cached JavaScript file. If you want to toy with CSP see also https://csp-evaluator.withgoogle.com/ Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	7 роки тому
Hendrik Leppelsack	e5d8726859	remove ie8+9 support	8 роки тому
Daniel Aleksandersen	7a45f05ed5	Stupid clients only literally understand rel="icon" rel="shortcut icon" hasn’t been relevant in years, isn’t in any standards, and causes problems for simple pattern matching clients. https://www.w3.org/TR/html/links.html#linkTypes	8 роки тому
Hendrik Leppelsack	99b9ec41c1	support print stylesheets	9 роки тому
maprambo	edb1fee610	Added Safari tabbed pin icon Added the necessary code and a black and inverted version of the favicon/ touch icon in svg format	8 роки тому
Morris Jobke	069ed71dbe	Add favicon for IE 8+	9 роки тому
Lukas Reschke	436c149fbb	Prevent referer from being sent Nice hardening for enhanced privacy. Especially useful when using embedded viewers such as files_pdfviewer.	8 роки тому
Jan-Christoph Borchardt	0b27bcba76	add theme-color for better Android browser integration	9 роки тому
Volker E	790324b313	addressing #14984 removing redundant type attributes	9 роки тому
Volker E	4c46d0c46c	addressing #14983 obsolete Google Chrome Frame	9 роки тому
Volker E	6ad76b5cc2	addressing #14982 self-closing tags ending slash doesn't have a purpose & should be removed	9 роки тому
Volker E	25b77159c4	adressing #14979 meta charset declaration should be first in head	9 роки тому
Volker E	f3cd552797	addressing #14978 - remove html root classes targeting IE6/IE7	9 роки тому
Lode Hoste	27b35500a7	Disable application-specific favicons for non-user pages	9 роки тому
Joas Schilling	4172ba48d4	Deduplicate template code and do not translate the links	9 роки тому
Lukas Reschke	b432ea29c9	Add `rel="noreferrer"` where possible and switch to HTTPS Just to follow good practise and prevent some automated scanners to complain about "Cross-domain Referer leakage".	9 роки тому
Lode Hoste	96f81961ed	Allow application-specific favicons	9 роки тому
Lukas Reschke	be19e78e69	Add requesttoken to base template Potentially fixes https://github.com/owncloud/core/issues/12580	9 роки тому
Lukas Reschke	510d0b2cf3	Fix the "addHeader($tag, $attributes, $text)" methods to not ignore the $text parameter Also support closing tags with no text content given Conflicts: lib/private/template.php	9 роки тому
Clark Tomlinson	ca5abe5744	Setting moment locale based on user selection	9 роки тому
Lukas Reschke	bce5c2dae9	Add X-UA-Compatible to all templates Replaces https://github.com/owncloud/core/pull/10850	9 роки тому
Jan-Christoph Borchardt	bd56619e7a	also add no-JavaScript notice to log in and sharing pages because they do not work without JS either	9 роки тому
Clark Tomlinson	e0a8321b23	Adding type to favicon	10 роки тому
Thomas Müller	cbe3595f64	using flush() here is pointless as we render the layout into a memory buffer and actually transmit the data later	10 роки тому
Morris Jobke	cea7d4961e	move to updated version of placeholder	10 роки тому
Thomas Müller	30168169b9	Flush the Buffer Early - right after head	10 роки тому
Jan-Christoph Borchardt	74eb9bea22	add 'body-public' ID to body in base layout so it can be identified via CSS	10 роки тому
Jan-Christoph Borchardt	3e803b5e36	restrict zooming on mobile devices for the publicly accessible, optimized pages	10 роки тому
Vincent Petry	f8c865993f	Fixed viewport layout using commas instead of semicolons Fixes #5285	10 роки тому
Jan-Christoph Borchardt	94ae66c651	fix web interface showing very small when accessed on smartphone	10 роки тому
Björn Schießle	75fd6d4fde	initialize OC_Defaults in template constructorX	11 роки тому
Jan-Christoph Borchardt	aacca494c5	introduce shortname themable string and split from title, use for image alt text	11 роки тому
Björn Schießle	3c691c9ec9	move to non-static OC_Defaults Conflicts: lib/mail.php	11 роки тому

1 2

68 Коміти (b4cebc353969649dfd6e2bc16dce70bb0689a387)