summaryrefslogtreecommitdiffstats
path: root/tests/lib/AppFramework/Http
Commit message (Expand)AuthorAgeFilesLines
* Add testsRoeland Jago Douma2019-08-102-0/+266
* Add feature policy headerRoeland Jago Douma2019-08-102-1/+3
* Update CSP test cases to handle the new form-actionRoeland Jago Douma2019-07-311-58/+58
* Set empty CSP by defaultRoeland Jago Douma2019-04-162-3/+3
* Set default frame-ancestors to 'self'Roeland Jago Douma2019-01-083-60/+60
* CSP: Allow fonts to be provided in dataRoeland Jago Douma2019-01-073-61/+61
* Only trust the X-FORWARDED-HOST header for trusted proxiesRoeland Jago Douma2018-12-171-53/+90
* Adding handling of CIDR notation to trusted_proxies for IPv4Oliver Wegner2018-10-301-0/+115
* Add report-uri to CSPRoeland Jago Douma2018-10-211-0/+15
* Disallow unsafe-eval by defaultRoeland Jago Douma2018-10-143-59/+66
* Move caching logic to responseRoeland Jago Douma2018-06-041-2/+12
* Remove testcaseRoeland Jago Douma2018-03-051-1/+0
* Add test for PublicTemplateResponseJulius Härtl2018-02-271-0/+84
* Fix proper typesRoeland Jago Douma2018-02-221-1/+1
* Fix testsRoeland Jago Douma2018-02-211-12/+16
* Fix "Undefined method setExpectedException()"Joas Schilling2018-01-241-1/+1
* Remove not needed 3rdparty app disabling during upgrade for PHP 5.xMorris Jobke2018-01-191-1/+0
* Remove deprecated core APIJoas Schilling2018-01-151-16/+3
* allow 'Nextcloud' in the user agent string of AndroidBjoern Schiessle2017-12-121-0/+14
* Use ::class in test mocksMorris Jobke2017-10-242-7/+8
* Handle SameSiteCookie check for index.php in AppFramework MiddlewareRoeland Jago Douma2017-09-241-2/+12
* Add CSP frame-ancestors supportThomas Citharel2017-09-151-0/+41
* Add metadata to \OCP\AppFramework\Http\Response::throttleLukas Reschke2017-07-271-0/+5
* Make BruteForceProtection annotation more cleverLukas Reschke2017-04-131-0/+5
* Don't try to parse empty body if there is no bodyRoeland Jago Douma2017-04-041-1/+4
* Fix unit testsMorris Jobke2017-03-284-110/+110
* Adjust tests to include base-uriLukas Reschke2017-03-161-1/+1
* Add base-uri to CSP policyLukas Reschke2017-03-163-109/+109
* add test for skipping cookie checks for ocsRobin Appelman2017-03-101-0/+25
* oc_token should be nc_tokenChristoph Wurst2017-02-021-1/+1
* fix data response test expected cache headersChristoph Wurst2017-01-101-1/+1
* set 'no-store' cache header if we do not want FF to cacheChristoph Wurst2017-01-091-1/+1
* Harden cookies more appropriateLukas Reschke2016-11-231-0/+70
* add tests for http/outputRobin Appelman2016-11-161-0/+31
* Identify Chromium as ChromeJoas Schilling2016-10-261-0/+14
* Add support for CSP noncesLukas Reschke2016-10-241-0/+24
* Add FileDisplayResponseRoeland Jago Douma2016-09-051-0/+109
* Merge pull request #797 from nextcloud/only-match-for-auth-cookieJoas Schilling2016-08-311-1/+77
|\
| * Match only for actual session cookieLukas Reschke2016-08-091-1/+77
* | Remove reading PATH_INFO from server variableLukas Reschke2016-08-191-16/+0
|/
* [master] Port Same-Site Cookies to masterLukas Reschke2016-07-201-28/+279
* Fix phpunit-5.4 wargningRoeland Jago Douma2016-07-113-18/+48
* Move tests/ to PSR-4 (#24731)Joas Schilling2016-05-2014-0/+3852