diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2016-12-14 13:17:20 +0100 |
|---|---|---|
| committer | Lukas Reschke <lukas@statuscode.ch> | 2016-12-14 13:17:20 +0100 |
| commit | 7d221ff8f4d5616b24d52bb363ed2df06a45f6cf (patch) | |
| tree | ca58139bb4886f6e65cbe1beb25d72ed1ee7836f /lib/private/Security | |
| parent | cd1929382ff38f321df59b17962016496b22104c (diff) | |
| download | nextcloud-server-7d221ff8f4d5616b24d52bb363ed2df06a45f6cf.tar.gz nextcloud-server-7d221ff8f4d5616b24d52bb363ed2df06a45f6cf.zip | |
Safari CSPv3 support is sub-par
With 10.0.1 CSPv3 is broken in Safari if it doesn't run from a local IP. Awesome.
=> Let's remove this for Safari and keep chrome and Firefox in the whitelist.
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
Diffstat (limited to 'lib/private/Security')
| -rw-r--r-- | lib/private/Security/CSP/ContentSecurityPolicyNonceManager.php | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/lib/private/Security/CSP/ContentSecurityPolicyNonceManager.php b/lib/private/Security/CSP/ContentSecurityPolicyNonceManager.php index 284700566d6..85ae127f5f1 100644 --- a/lib/private/Security/CSP/ContentSecurityPolicyNonceManager.php +++ b/lib/private/Security/CSP/ContentSecurityPolicyNonceManager.php @@ -69,8 +69,6 @@ class ContentSecurityPolicyNonceManager { Request::USER_AGENT_CHROME, // Firefox 45+ '/^Mozilla\/5\.0 \([^)]+\) Gecko\/[0-9.]+ Firefox\/(4[5-9]|[5-9][0-9])\.[0-9.]+$/', - // Safari 10+ - '/^Mozilla\/5\.0 \([^)]+\) AppleWebKit\/[0-9.]+ \(KHTML, like Gecko\) Version\/1[0-9.]+ Safari\/[0-9.A-Z]+$/', ]; if($this->request->isUserAgent($browserWhitelist)) { |