mirror of
https://github.com/nextcloud/server.git
synced 2026-02-20 00:12:30 -05:00
X-UA-Compatible and X-Download-Options headers are interpreted or relevant for Internet Explorer only. With the deprecation of Internet Explorer support in Nextcloud 20 and planned support removal already in Nextcloud 22, these became obsolete and are hereby removed, including their removal from setup checks. Signed-off-by: MichaIng <micha@dietpi.com>
64 lines
3.8 KiB
Gherkin
64 lines
3.8 KiB
Gherkin
Feature: carddav
|
|
Scenario: Accessing a not existing addressbook of another user
|
|
Given user "user0" exists
|
|
When "admin" requests addressbook "user0/MyAddressbook" with statuscode "404" on the endpoint "/remote.php/dav/addressbooks/users/"
|
|
And The CardDAV exception is "Sabre\DAV\Exception\NotFound"
|
|
And The CardDAV error message is "Addressbook with name 'MyAddressbook' could not be found"
|
|
|
|
Scenario: Accessing a not shared addressbook of another user
|
|
Given user "user0" exists
|
|
Given "admin" creates an addressbook named "MyAddressbook" with statuscode "201"
|
|
When "user0" requests addressbook "admin/MyAddressbook" with statuscode "404" on the endpoint "/remote.php/dav/addressbooks/users/"
|
|
And The CardDAV exception is "Sabre\DAV\Exception\NotFound"
|
|
And The CardDAV error message is "Addressbook with name 'MyAddressbook' could not be found"
|
|
|
|
Scenario: Accessing a not existing addressbook of another user via legacy endpoint
|
|
Given user "user0" exists
|
|
When "admin" requests addressbook "user0/MyAddressbook" with statuscode "404" on the endpoint "/remote.php/carddav/addressbooks/"
|
|
And The CardDAV exception is "Sabre\DAV\Exception\NotFound"
|
|
And The CardDAV error message is "Addressbook with name 'MyAddressbook' could not be found"
|
|
|
|
Scenario: Accessing a not shared addressbook of another user via legacy endpoint
|
|
Given user "user0" exists
|
|
Given "admin" creates an addressbook named "MyAddressbook" with statuscode "201"
|
|
When "user0" requests addressbook "admin/MyAddressbook" with statuscode "404" on the endpoint "/remote.php/carddav/addressbooks/"
|
|
And The CardDAV exception is "Sabre\DAV\Exception\NotFound"
|
|
And The CardDAV error message is "Addressbook with name 'MyAddressbook' could not be found"
|
|
|
|
Scenario: Accessing a not existing addressbook of myself
|
|
Given user "user0" exists
|
|
When "user0" requests addressbook "admin/MyAddressbook" with statuscode "404" on the endpoint "/remote.php/dav/addressbooks/users/"
|
|
And The CardDAV exception is "Sabre\DAV\Exception\NotFound"
|
|
And The CardDAV error message is "Addressbook with name 'MyAddressbook' could not be found"
|
|
|
|
Scenario: Creating a new addressbook
|
|
When "admin" creates an addressbook named "MyAddressbook" with statuscode "201"
|
|
Then "admin" requests addressbook "admin/MyAddressbook" with statuscode "207" on the endpoint "/remote.php/dav/addressbooks/users/"
|
|
|
|
Scenario: Accessing ones own contact
|
|
Given "admin" creates an addressbook named "MyAddressbook" with statuscode "201"
|
|
Given "admin" uploads the contact "bjoern.vcf" to the addressbook "MyAddressbook"
|
|
When Downloading the contact "bjoern.vcf" from addressbook "MyAddressbook" as user "admin"
|
|
Then The following HTTP headers should be set
|
|
|Content-Disposition|attachment; filename*=UTF-8''bjoern.vcf; filename="bjoern.vcf"|
|
|
|Content-Type|text/vcard; charset=utf-8|
|
|
|Content-Security-Policy|default-src 'none';|
|
|
|X-Content-Type-Options |nosniff|
|
|
|X-Frame-Options|SAMEORIGIN|
|
|
|X-Permitted-Cross-Domain-Policies|none|
|
|
|X-Robots-Tag|none|
|
|
|X-XSS-Protection|1; mode=block|
|
|
|
|
Scenario: Exporting the picture of ones own contact
|
|
Given "admin" creates an addressbook named "MyAddressbook" with statuscode "201"
|
|
Given "admin" uploads the contact "bjoern.vcf" to the addressbook "MyAddressbook"
|
|
When Exporting the picture of contact "bjoern.vcf" from addressbook "MyAddressbook" as user "admin"
|
|
Then The following HTTP headers should be set
|
|
|Content-Disposition|attachment; filename=bjoern.vcf.jpg|
|
|
|Content-Type|image/jpeg|
|
|
|Content-Security-Policy|default-src 'none';|
|
|
|X-Content-Type-Options |nosniff|
|
|
|X-Frame-Options|SAMEORIGIN|
|
|
|X-Permitted-Cross-Domain-Policies|none|
|
|
|X-Robots-Tag|none|
|
|
|X-XSS-Protection|1; mode=block|
|