From 90fa27694a6f454820487dcb1ca4e4ceec90a9a1 Mon Sep 17 00:00:00 2001 From: Joas Schilling Date: Tue, 20 Jun 2017 13:48:51 +0200 Subject: Use PNG version of the icons for shipped activities Signed-off-by: Joas Schilling --- core/img/actions/checkmark.png | Bin 0 -> 4217 bytes core/img/actions/comment.png | Bin 0 -> 4217 bytes core/img/actions/download.png | Bin 0 -> 4217 bytes core/img/actions/password.png | Bin 0 -> 4217 bytes core/img/actions/share.png | Bin 0 -> 4217 bytes core/img/actions/star.png | Bin 0 -> 4217 bytes core/img/actions/starred.png | Bin 0 -> 4217 bytes core/img/actions/tag.png | Bin 0 -> 4217 bytes core/img/places/calendar-dark.png | Bin 0 -> 4217 bytes 9 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 core/img/actions/checkmark.png create mode 100644 core/img/actions/comment.png create mode 100644 core/img/actions/download.png create mode 100644 core/img/actions/password.png create mode 100644 core/img/actions/share.png create mode 100644 core/img/actions/star.png create mode 100644 core/img/actions/starred.png create mode 100644 core/img/actions/tag.png create mode 100644 core/img/places/calendar-dark.png (limited to 'core') diff --git a/core/img/actions/checkmark.png b/core/img/actions/checkmark.png new file mode 100644 index 00000000000..eb938698fd2 Binary files /dev/null and b/core/img/actions/checkmark.png differ diff --git a/core/img/actions/comment.png b/core/img/actions/comment.png new file mode 100644 index 00000000000..0dec289e38b Binary files /dev/null and b/core/img/actions/comment.png differ diff --git a/core/img/actions/download.png b/core/img/actions/download.png new file mode 100644 index 00000000000..6808969b30b Binary files /dev/null and b/core/img/actions/download.png differ diff --git a/core/img/actions/password.png b/core/img/actions/password.png new file mode 100644 index 00000000000..afe3e31a658 Binary files /dev/null and b/core/img/actions/password.png differ diff --git a/core/img/actions/share.png b/core/img/actions/share.png new file mode 100644 index 00000000000..8cc66f08f5d Binary files /dev/null and b/core/img/actions/share.png differ diff --git a/core/img/actions/star.png b/core/img/actions/star.png new file mode 100644 index 00000000000..61727fc3f19 Binary files /dev/null and b/core/img/actions/star.png differ diff --git a/core/img/actions/starred.png b/core/img/actions/starred.png new file mode 100644 index 00000000000..aa5bced7751 Binary files /dev/null and b/core/img/actions/starred.png differ diff --git a/core/img/actions/tag.png b/core/img/actions/tag.png new file mode 100644 index 00000000000..6a466b367b3 Binary files /dev/null and b/core/img/actions/tag.png differ diff --git a/core/img/places/calendar-dark.png b/core/img/places/calendar-dark.png new file mode 100644 index 00000000000..88e8ea64db9 Binary files /dev/null and b/core/img/places/calendar-dark.png differ -- cgit v1.2.3 From 2f87fb6b456fd109c90a5093c31b7a3f62a32040 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 20 Jun 2017 19:46:10 +0200 Subject: Add Clear-Site-Data header This adds a Clear-Site-Data header to the logout response which will delete all relevant data in the caches which may contain potentially sensitive content. See https://w3c.github.io/webappsec-clear-site-data/#header for the definition of the types. Ref https://twitter.com/mikewest/status/877149667909406723 Signed-off-by: Lukas Reschke --- core/Controller/LoginController.php | 4 +++- tests/Core/Controller/LoginControllerTest.php | 2 ++ 2 files changed, 5 insertions(+), 1 deletion(-) (limited to 'core') diff --git a/core/Controller/LoginController.php b/core/Controller/LoginController.php index 93b695dd999..1c75b1f3c8b 100644 --- a/core/Controller/LoginController.php +++ b/core/Controller/LoginController.php @@ -107,7 +107,9 @@ class LoginController extends Controller { } $this->userSession->logout(); - return new RedirectResponse($this->urlGenerator->linkToRouteAbsolute('core.login.showLoginForm')); + $response = new RedirectResponse($this->urlGenerator->linkToRouteAbsolute('core.login.showLoginForm')); + $response->addHeader('Clear-Site-Data', '"cache", "cookies", "storage", "executionContexts"'); + return $response; } /** diff --git a/tests/Core/Controller/LoginControllerTest.php b/tests/Core/Controller/LoginControllerTest.php index ca32a04efe1..bd2d0143caf 100644 --- a/tests/Core/Controller/LoginControllerTest.php +++ b/tests/Core/Controller/LoginControllerTest.php @@ -95,6 +95,7 @@ class LoginControllerTest extends TestCase { ->willReturn('/login'); $expected = new RedirectResponse('/login'); + $expected->addHeader('Clear-Site-Data', '"cache", "cookies", "storage", "executionContexts"'); $this->assertEquals($expected, $this->loginController->logout()); } @@ -124,6 +125,7 @@ class LoginControllerTest extends TestCase { ->willReturn('/login'); $expected = new RedirectResponse('/login'); + $expected->addHeader('Clear-Site-Data', '"cache", "cookies", "storage", "executionContexts"'); $this->assertEquals($expected, $this->loginController->logout()); } -- cgit v1.2.3 From 5389ffca86c72fcfc3aa0ad7695d1f25d8d08a0e Mon Sep 17 00:00:00 2001 From: Maxence Lange Date: Fri, 23 Jun 2017 09:18:20 -0100 Subject: Hint should not be clickable Signed-off-by: Maxence Lange --- core/templates/layout.user.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'core') diff --git a/core/templates/layout.user.php b/core/templates/layout.user.php index 7d54d9b21f7..770a398554c 100644 --- a/core/templates/layout.user.php +++ b/core/templates/layout.user.php @@ -58,10 +58,10 @@ class="app-icon"/> - + + -