aboutsummaryrefslogtreecommitdiffstats
path: root/settings/controller/securitysettingscontroller.php
Commit message (Collapse)AuthorAgeFilesLines
* Rename files to be PSR-4 compliantLukas Reschke2016-04-061-70/+0
|
* Happy new year!Thomas Müller2016-01-121-1/+1
|
* Update license headersJenkins for ownCloud2015-03-261-5/+17
|
* Let users configure security headers in their WebserverLukas Reschke2015-03-021-37/+0
| | | | | | | | | | Doing this in the PHP code is not the right approach for multiple reasons: 1. A bug in the PHP code prevents them from being added to the response. 2. They are only added when something is served via PHP and not in other cases (that makes for example the newest IE UXSS which is not yet patched by Microsoft exploitable on ownCloud) 3. Some headers such as the Strict-Transport-Security might require custom modifications by administrators. This was not possible before and lead to buggy situations. This pull request moves those headers out of the PHP code and adds a security check to the admin settings performed via JS.
* Revert "Updating license headers"Morris Jobke2015-02-261-16/+6
| | | | This reverts commit 6a1a4880f0d556fb090f19a5019fec31916f5c36.
* Updating license headersJenkins for ownCloud2015-02-231-6/+16
|
* Migrate "setsecurity.php" to the AppFrameworkLukas Reschke2014-11-031-0/+95
Add switch to enforce SSL for subdomains Add unit tests Add test for boolean values Camel-case Fix ugly JS