upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-04-28 01:28:08 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 53
nextcloud/lib/public/AppFramework/Http
History
Ferdinand Thiessen 7df9eb3351 feat(ContentSecurityPolicy): Allow to set strict-dynamic on script-src-elem only 
This adds the possibility to set `strict-dynamic` on `script-src-elem` only while keep the default rules for `script-src`.
The idea is to allow loading module js which imports other files and thus does not allow nonces on import but on the initial script tag.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2023-11-17 11:12:57 +01:00
..
Attribute feat(openapi): Add OpenAPI attribute to allow multiple scopes and overwriting tags 2023-11-03 09:25:11 +01:00
Events add separate event for rendering login page template 2023-08-17 10:57:56 +02:00
Template Add template types to responses 2023-06-30 09:33:29 +02:00
ContentSecurityPolicy.php feat(ContentSecurityPolicy): Allow to set strict-dynamic on script-src-elem only 2023-11-17 11:12:57 +01:00
DataDisplayResponse.php Add template types to responses 2023-06-30 09:33:29 +02:00
DataDownloadResponse.php Add template types to responses 2023-06-30 09:33:29 +02:00
DataResponse.php Add template types to responses 2023-06-30 09:33:29 +02:00
DownloadResponse.php Add template types to responses 2023-06-30 09:33:29 +02:00
EmptyContentSecurityPolicy.php feat(ContentSecurityPolicy): Allow to set strict-dynamic on script-src-elem only 2023-11-17 11:12:57 +01:00
EmptyFeaturePolicy.php composer run cs:fix 2023-01-20 11:45:08 +01:00
FeaturePolicy.php Update php licenses 2021-06-04 22:02:41 +02:00
FileDisplayResponse.php Add template types to responses 2023-06-30 09:33:29 +02:00
ICallbackResponse.php composer run cs:fix 2023-01-20 11:45:08 +01:00
IOutput.php composer run cs:fix 2023-01-20 11:45:08 +01:00
JSONResponse.php Add template types to responses 2023-06-30 09:33:29 +02:00
NotFoundResponse.php Add template types to responses 2023-06-30 09:33:29 +02:00
RedirectResponse.php Add template types to responses 2023-06-30 09:33:29 +02:00
RedirectToDefaultAppResponse.php Add template types to responses 2023-06-30 09:33:29 +02:00
Response.php Stop sending deprecated Pragma header 2023-08-28 15:11:22 +02:00
StandaloneTemplateResponse.php Add template types to responses 2023-06-30 09:33:29 +02:00
StreamResponse.php Add template types to responses 2023-06-30 09:33:29 +02:00
StrictContentSecurityPolicy.php Allow "wasm-unsafe-eval" in CSP 2023-08-10 02:38:41 +02:00
StrictEvalContentSecurityPolicy.php fix(docs): Fix language and copy-paste class name in docs of CSP 2023-05-30 13:39:33 +02:00
StrictInlineContentSecurityPolicy.php fix(docs): Fix language and copy-paste class name in docs of CSP 2023-05-30 13:39:33 +02:00
TemplateResponse.php fix!: Remove legacy event dispatching Symfony's GenericEvent from AdditionalScripts 2023-07-27 09:57:52 +02:00
TextPlainResponse.php Add template types to responses 2023-06-30 09:33:29 +02:00
TooManyRequestsResponse.php Add template types to responses 2023-06-30 09:33:29 +02:00
ZipResponse.php Add template types to responses 2023-06-30 09:33:29 +02:00