summaryrefslogtreecommitdiffstats
path: root/lib/public/AppFramework/Http/ContentSecurityPolicy.php
Commit message (Expand)AuthorAgeFilesLines
* fix!(ContentSecurityPolicy): Make `strict-dynamic` enabled by default on `scr...Ferdinand Thiessen2023-11-171-1/+1
* feat(ContentSecurityPolicy): Allow to set `strict-dynamic` on `script-src-ele...Ferdinand Thiessen2023-11-171-0/+2
* Allow "wasm-unsafe-eval" in CSPDaniel Calviño Sánchez2023-08-101-0/+2
* Add CSP policy merge priority for booleansVincent Petry2022-04-011-1/+1
* Allow to set a strict-dynamic CSP through the APIJulius Härtl2022-03-091-0/+2
* Update php licensesJohn Molakvoæ (skjnldsv)2021-06-041-1/+0
* Update license headersChristoph Wurst2020-12-301-1/+0
* Update all license headers for Nextcloud 21Christoph Wurst2020-12-161-0/+1
* Update comment to reflect current CSP policyThomas Citharel2020-12-121-1/+1
* Remove @package annotations from public namespaceJulius Härtl2020-08-261-1/+0
* Update the license headers for Nextcloud 19Christoph Wurst2020-03-311-1/+1
* Update license headersChristoph Wurst2019-12-051-1/+2
* Add form-action CSP elementRoeland Jago Douma2019-07-311-0/+5
* Set default frame-ancestors to 'self'Roeland Jago Douma2019-01-081-1/+3
* CSP: Allow fonts to be provided in dataRoeland Jago Douma2019-01-071-0/+1
* Basic CSP no longer deprecatedRoeland Jago Douma2018-11-081-1/+0
* Add report-uri to CSPRoeland Jago Douma2018-10-211-0/+3
* Disallow unsafe-eval by defaultRoeland Jago Douma2018-10-141-6/+2
* Add workerSrc to CSPRoeland Jago Douma2018-09-041-0/+3
* Add stricter CSPsRoeland Jago Douma2018-06-131-2/+5
* Update license headersMorris Jobke2017-11-061-0/+1
* fix typo and set @since properlyThomas Citharel2017-09-151-1/+1
* Add CSP frame-ancestors supportThomas Citharel2017-09-151-0/+3
* Add support for CSP noncesLukas Reschke2016-10-241-2/+0
* Fix othersJoas Schilling2016-07-211-1/+2
* Update license headersLukas Reschke2016-05-261-1/+1
* Move \OCP\AppFramework to PSR-4Roeland Jago Douma2016-05-061-0/+88