nextcloud/lib/private/legacy
Ferdinand Thiessen 2916e5df7e
feat: Provide CSP nonce as <meta> element
This way we use the CSP nonce for dynamically loaded scripts.
Important to notice: The CSP nonce must NOT be injected in `content` as
this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors).

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-13 10:32:44 +02:00
..
template chore: Add SPDX header 2024-05-24 13:11:22 +02:00
OC_API.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
OC_App.php docs: correct return type for findAppInDirectories 2024-07-11 23:13:08 +02:00
OC_Defaults.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
OC_Files.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
OC_Helper.php refactor: Migrate some legacy and core functions to IFilenameValidator 2024-07-19 19:41:46 +02:00
OC_Hook.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
OC_Image.php Merge pull request #38364 from joshtrichards/jr-preview-libgd-webp-animation-bypass 2024-08-06 17:56:14 +02:00
OC_JSON.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
OC_Response.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
OC_Template.php feat: Provide CSP nonce as <meta> element 2024-08-13 10:32:44 +02:00
OC_User.php fix(Token): add FILESYSTEM scope with SCOPE_SKIP_PASSWORD_VALIDATION 2024-06-24 13:51:15 +02:00
OC_Util.php fix(SetupCheck): Properly check public access to data directory 2024-08-08 22:08:42 +02:00