| Commit message (Collapse) | Author | Age | Files | Lines |
|\
| |
| | |
Add public API to give developers the possibility to adjust the global CSP defaults
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
defaults
Allows to inject something into the default content policy. This is for
example useful when you're injecting Javascript code into a view belonging
to another controller and cannot modify its Content-Security-Policy itself.
Note that the adjustment is only applied to applications that use AppFramework
controllers.
To use this from your `app.php` use `\OC::$server->getContentSecurityPolicyManager()->addDefaultPolicy($policy)`,
$policy has to be of type `\OCP\AppFramework\Http\ContentSecurityPolicy`.
To test this add something like the following into an `app.php` of any enabled app:
```
$manager = \OC::$server->getContentSecurityPolicyManager();
$policy = new \OCP\AppFramework\Http\ContentSecurityPolicy(false);
$policy->addAllowedFrameDomain('asdf');
$policy->addAllowedScriptDomain('yolo.com');
$policy->allowInlineScript(false);
$manager->addDefaultPolicy($policy);
$policy = new \OCP\AppFramework\Http\ContentSecurityPolicy(false);
$policy->addAllowedFontDomain('yolo.com');
$manager->addDefaultPolicy($policy);
$policy = new \OCP\AppFramework\Http\ContentSecurityPolicy(false);
$policy->addAllowedFrameDomain('banana.com');
$manager->addDefaultPolicy($policy);
```
If you now open the files app the policy should be:
```
Content-Security-Policy:default-src 'none';script-src yolo.com 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data: blob:;font-src yolo.com 'self';connect-src 'self';media-src 'self';frame-src asdf banana.com 'self'
```
|
|\ \
| | |
| | | |
Add path filter to OCS Share API shared_with_me=true
|
| | |
| | |
| | |
| | |
| | |
| | | |
This allows all clients to quickly get the share info for a given path.
Instead of returning everything and filtering it then manually on the
client side.
|
|\ \ \
| |/ /
|/| | |
Add fallback moveFromCache implementation
|
| | | |
|
| |/
|/|
| |
| |
| |
| | |
For group shares we can have children. Those are custom shares when a
user has moved or deleted a group share. Those also have to be deleted
if the group share is removed.
|
|\ \
| | |
| | | |
add IUserMountCache->getMountsForFileId
|
| | | |
|
| |/ |
|
| |
| |
| |
| |
| |
| |
| |
| | |
* Made comments more clear
* Removed unneeded methods
* IShares shareTime is now a proper DateTime object
* IShares getPath -> getNode & setPath -> setNode
* Fix unit tests
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| | |
ownCloud might not yet be setup. This causes an issue as the user config requires a setup ownCloud. Thus this needs a block whether ownCloud is installed or not.
Fixes https://github.com/owncloud/core/issues/21955
|
|\ \
| |/
|/|
| |
| | |
owncloud/share2_do_not_returned_removed_group_shares
[Share 2.0] Properly handle user deleted group shares
|
| |
| |
| |
| |
| |
| | |
If a user deletes a group share we create a special share entry. To the
API this is just a normal group share for that user with permissions 0.
But we should not return this.
|
|\ \
| | |
| | | |
Move methods to the factory that are not related to translating, but to guessing/finding the language
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
|\ \ \
| | | |
| | | | |
[Sharing 2.0] update share
|
| | | | |
|
| | | | |
|
| | | | |
|
| |/ / |
|
|\ \ \
| |_|/
|/| | |
Querybuilder clob comparison
|
| | | |
|
| |/ |
|
|/ |
|
|\
| |
| | |
Changing the avatar of the user emits the changeUser event which trig…
|
| | |
|
| | |
|
| |
| |
| |
| | |
update of the system addressbook
|
|\ \
| |/
|/| |
Add new CSRF manager for unit testing purposes
|
| |
| |
| |
| | |
This adds a new CSRF manager for unit testing purposes, it's interface is based upon https://github.com/symfony/security-csrf. Due to some of our required custom changes it is however not possible to use the Symfony component directly.
|
| | |
|
|\ \
| |/
|/| |
occ config:system:set can now set other value types
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
Integers, doubles, booleans and even arrays can now be set, with the
--type=... option. Array setting can be specified by passing multiple
name arguments, e.g. `./occ config:system:set redis port --value=123
--type=integer`
|
|\ \
| | |
| | | |
[Share 2.0] Add deleteFromSelf method
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This allows recipient to delete a share. For user shares this is the
same as deleting (at least for now).
But for group shares this means creating a new share with type 2. With
permissions set to 0.
|
|\ \ \
| |/ /
|/| | |
Move the notification API to public namespace
|