Commit message (Expand) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add tests | Roeland Jago Douma | 2019-08-10 | 2 | -0/+266 |
* | Add feature policy header | Roeland Jago Douma | 2019-08-10 | 2 | -1/+3 |
* | Update CSP test cases to handle the new form-action | Roeland Jago Douma | 2019-07-31 | 1 | -58/+58 |
* | Set empty CSP by default | Roeland Jago Douma | 2019-04-16 | 2 | -3/+3 |
* | Set default frame-ancestors to 'self' | Roeland Jago Douma | 2019-01-08 | 3 | -60/+60 |
* | CSP: Allow fonts to be provided in data | Roeland Jago Douma | 2019-01-07 | 3 | -61/+61 |
* | Only trust the X-FORWARDED-HOST header for trusted proxies | Roeland Jago Douma | 2018-12-17 | 1 | -53/+90 |
* | Adding handling of CIDR notation to trusted_proxies for IPv4 | Oliver Wegner | 2018-10-30 | 1 | -0/+115 |
* | Add report-uri to CSP | Roeland Jago Douma | 2018-10-21 | 1 | -0/+15 |
* | Disallow unsafe-eval by default | Roeland Jago Douma | 2018-10-14 | 3 | -59/+66 |
* | Move caching logic to response | Roeland Jago Douma | 2018-06-04 | 1 | -2/+12 |
* | Remove testcase | Roeland Jago Douma | 2018-03-05 | 1 | -1/+0 |
* | Add test for PublicTemplateResponse | Julius Härtl | 2018-02-27 | 1 | -0/+84 |
* | Fix proper types | Roeland Jago Douma | 2018-02-22 | 1 | -1/+1 |
* | Fix tests | Roeland Jago Douma | 2018-02-21 | 1 | -12/+16 |
* | Fix "Undefined method setExpectedException()" | Joas Schilling | 2018-01-24 | 1 | -1/+1 |
* | Remove not needed 3rdparty app disabling during upgrade for PHP 5.x | Morris Jobke | 2018-01-19 | 1 | -1/+0 |
* | Remove deprecated core API | Joas Schilling | 2018-01-15 | 1 | -16/+3 |
* | allow 'Nextcloud' in the user agent string of Android | Bjoern Schiessle | 2017-12-12 | 1 | -0/+14 |
* | Use ::class in test mocks | Morris Jobke | 2017-10-24 | 2 | -7/+8 |
* | Handle SameSiteCookie check for index.php in AppFramework Middleware | Roeland Jago Douma | 2017-09-24 | 1 | -2/+12 |
* | Add CSP frame-ancestors support | Thomas Citharel | 2017-09-15 | 1 | -0/+41 |
* | Add metadata to \OCP\AppFramework\Http\Response::throttle | Lukas Reschke | 2017-07-27 | 1 | -0/+5 |
* | Make BruteForceProtection annotation more clever | Lukas Reschke | 2017-04-13 | 1 | -0/+5 |
* | Don't try to parse empty body if there is no body | Roeland Jago Douma | 2017-04-04 | 1 | -1/+4 |
* | Fix unit tests | Morris Jobke | 2017-03-28 | 4 | -110/+110 |
* | Adjust tests to include base-uri | Lukas Reschke | 2017-03-16 | 1 | -1/+1 |
* | Add base-uri to CSP policy | Lukas Reschke | 2017-03-16 | 3 | -109/+109 |
* | add test for skipping cookie checks for ocs | Robin Appelman | 2017-03-10 | 1 | -0/+25 |
* | oc_token should be nc_token | Christoph Wurst | 2017-02-02 | 1 | -1/+1 |
* | fix data response test expected cache headers | Christoph Wurst | 2017-01-10 | 1 | -1/+1 |
* | set 'no-store' cache header if we do not want FF to cache | Christoph Wurst | 2017-01-09 | 1 | -1/+1 |
* | Harden cookies more appropriate | Lukas Reschke | 2016-11-23 | 1 | -0/+70 |
* | add tests for http/output | Robin Appelman | 2016-11-16 | 1 | -0/+31 |
* | Identify Chromium as Chrome | Joas Schilling | 2016-10-26 | 1 | -0/+14 |
* | Add support for CSP nonces | Lukas Reschke | 2016-10-24 | 1 | -0/+24 |
* | Add FileDisplayResponse | Roeland Jago Douma | 2016-09-05 | 1 | -0/+109 |
* | Merge pull request #797 from nextcloud/only-match-for-auth-cookie | Joas Schilling | 2016-08-31 | 1 | -1/+77 |
|\ | |||||
| * | Match only for actual session cookie | Lukas Reschke | 2016-08-09 | 1 | -1/+77 |
* | | Remove reading PATH_INFO from server variable | Lukas Reschke | 2016-08-19 | 1 | -16/+0 |
|/ | |||||
* | [master] Port Same-Site Cookies to master | Lukas Reschke | 2016-07-20 | 1 | -28/+279 |
* | Fix phpunit-5.4 wargning | Roeland Jago Douma | 2016-07-11 | 3 | -18/+48 |
* | Move tests/ to PSR-4 (#24731) | Joas Schilling | 2016-05-20 | 14 | -0/+3852 |