mirror of
https://github.com/nextcloud/server.git
synced 2026-03-25 11:54:59 -04:00
This way we use the CSP nonce for dynamically loaded scripts. Important to notice: The CSP nonce must NOT be injected in `content` as this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors). Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> |
||
|---|---|---|
| .. | ||
| template | ||
| OC_API.php | ||
| OC_App.php | ||
| OC_Defaults.php | ||
| OC_Files.php | ||
| OC_Helper.php | ||
| OC_Hook.php | ||
| OC_Image.php | ||
| OC_JSON.php | ||
| OC_Response.php | ||
| OC_Template.php | ||
| OC_User.php | ||
| OC_Util.php | ||