summaryrefslogtreecommitdiffstats
path: root/tests/lib/AppFramework
Commit message (Expand)AuthorAgeFilesLines
* Update testsRoeland Jago Douma2018-02-081-8/+20
* Move passwordconfirmation to its own midlewareRoeland Jago Douma2018-01-022-10/+130
* disable password confirmation with SSOBjoern Schiessle2018-01-021-1/+10
* allow 'Nextcloud' in the user agent string of AndroidBjoern Schiessle2017-12-121-0/+14
* Merge pull request #6921 from nextcloud/appmanager-securitymiddlewareRoeland Jago Douma2017-10-241-1/+9
|\
| * Use proper DI for security middleware for app enabled checkMorris Jobke2017-10-241-1/+9
* | Use ::class in test mocksMorris Jobke2017-10-248-17/+24
|/
* Handle SameSiteCookie check for index.php in AppFramework MiddlewareRoeland Jago Douma2017-09-242-2/+145
* Add CSP frame-ancestors supportThomas Citharel2017-09-151-0/+41
* Remove explicit type hints for ControllerLukas Reschke2017-08-011-4/+4
* Merge pull request #5907 from nextcloud/add-metadata-to-throttle-callMorris Jobke2017-08-012-0/+9
|\
| * Add metadata to \OCP\AppFramework\Http\Response::throttleLukas Reschke2017-07-272-0/+9
* | Fix testsRoeland Jago Douma2017-07-313-61/+66
* | Fix middleware implementations signaturesRoeland Jago Douma2017-07-311-4/+5
|/
* Remove deprecated Controller FunctionsRoeland Jago Douma2017-07-201-69/+0
* Make BruteForceProtection annotation more cleverLukas Reschke2017-04-133-75/+196
* Add tests for multiple parametersLukas Reschke2017-04-131-5/+19
* Move to dedicated MiddleWareLukas Reschke2017-04-132-40/+287
* Add support for ratelimiting via annotationsLukas Reschke2017-04-131-4/+40
* Don't try to parse empty body if there is no bodyRoeland Jago Douma2017-04-041-1/+4
* Fix unit testsMorris Jobke2017-03-285-111/+111
* Add DI intergration testsRoeland Jago Douma2017-03-211-0/+136
* Extend DI testsRoeland Jago Douma2017-03-211-5/+14
* Adjust tests to include base-uriLukas Reschke2017-03-162-2/+2
* Add base-uri to CSP policyLukas Reschke2017-03-163-109/+109
* add test for skipping cookie checks for ocsRobin Appelman2017-03-101-0/+25
* oc_token should be nc_tokenChristoph Wurst2017-02-021-1/+1
* add some unit testsBjoern Schiessle2017-01-182-1/+85
* fix controller testChristoph Wurst2017-01-101-1/+1
* fix data response test expected cache headersChristoph Wurst2017-01-101-1/+1
* set 'no-store' cache header if we do not want FF to cacheChristoph Wurst2017-01-091-1/+1
* Merge pull request #2066 from nextcloud/fix-redirect-double-encodingMorris Jobke2016-11-291-6/+6
|\
| * do not double encode the redirect urlChristoph Wurst2016-11-091-6/+6
* | Harden cookies more appropriateLukas Reschke2016-11-231-0/+70
* | Merge pull request #1447 from nextcloud/password-confirmation-for-some-actionsMorris Jobke2016-11-181-0/+5
|\ \
| * | Fix unit testsJoas Schilling2016-11-181-0/+5
| |/
* / add tests for http/outputRobin Appelman2016-11-161-0/+31
|/
* Identify Chromium as ChromeJoas Schilling2016-10-261-0/+14
* Move browserSupportsCspV3 to CSPNonceManagerRoeland Jago Douma2016-10-251-5/+10
* Add support for CSP noncesLukas Reschke2016-10-242-1/+76
* Add testsRoeland Jago Douma2016-09-152-38/+43
* Fix getMock MapperTestUtilityRoeland Jago Douma2016-09-071-1/+1
* Split OCS version handlingRoeland Jago Douma2016-09-062-28/+85
* Add FileDisplayResponseRoeland Jago Douma2016-09-051-0/+109
* No body or content-length for 204 and 304 responsesRoeland Jago Douma2016-08-311-1/+28
* Merge pull request #797 from nextcloud/only-match-for-auth-cookieJoas Schilling2016-08-311-1/+77
|\
| * Match only for actual session cookieLukas Reschke2016-08-091-1/+77
* | Remove reading PATH_INFO from server variableLukas Reschke2016-08-191-16/+0
* | Add testsRoeland Jago Douma2016-08-141-6/+70
* | OCSController requires DataResponseRoeland Jago Douma2016-08-101-52/+5