upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-02-20 00:12:30 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 38
nextcloud/core
History
Ferdinand Thiessen 2916e5df7e
feat: Provide CSP nonce as <meta> element 
This way we use the CSP nonce for dynamically loaded scripts.
Important to notice: The CSP nonce must NOT be injected in `content` as
this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors).

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-13 10:32:44 +02:00
..
ajax chore: Add SPDX header 2024-05-10 11:07:50 +02:00
BackgroundJobs fix: Max file size for metadata generation 2024-08-05 08:48:15 +02:00
Command Merge pull request #47069 from nextcloud/fix/noid/display-message-on-no-migration-attributes 2024-08-07 11:48:20 -01:00
Controller fix: Add direct parameter to flow auth v2 2024-08-05 12:13:52 +02:00
css chore: Compile assets 2024-08-09 14:45:19 +02:00
Data chore: Add SPDX header 2024-05-27 14:53:40 +02:00
Db chore: Add SPDX header 2024-05-27 14:53:40 +02:00
doc chore: Add SPDX header 2024-05-27 14:53:40 +02:00
Events chore: Add SPDX header 2024-05-27 14:53:40 +02:00
Exception chore: Add SPDX header 2024-05-27 14:53:40 +02:00
fonts Include additional scripts in Noto fonts 2021-03-01 19:15:01 +01:00
img chore: Replace dashboard icon with Material Symbols "View Column" 2024-08-05 14:29:46 +02:00
js fix: Adapt icon color to new default for mime icons 2024-07-04 11:09:21 +02:00
l10n Fix(l10n): Update translations from Transifex 2024-08-10 00:20:14 +00:00
Listener feat: Add reserved options in a new OCP class so that applications know about them 2024-07-04 16:19:36 +02:00
Middleware chore: Add SPDX header 2024-05-27 14:53:40 +02:00
Migrations fix(migration): Add column if not exists 2024-08-07 20:09:51 +02:00
Notification feat(notifications): Migrate server INotifiers to new exceptions 2024-06-25 11:56:24 +02:00
Service chore: Add SPDX header 2024-05-27 14:53:40 +02:00
skeleton ownCloud -> Nextcloud 2016-07-28 15:47:04 +02:00
src fix: Make focussed app menu entry wider to see full name 2024-08-08 18:24:35 +02:00
templates feat: Provide CSP nonce as <meta> element 2024-08-13 10:32:44 +02:00
vendor chore: Add SPDX header 2024-05-27 14:53:40 +02:00
.l10nignore chore: Add SPDX header 2024-05-27 14:53:40 +02:00
Application.php perf(systemtags): Add index for systemtags_object_mappings.objectid 2024-07-30 13:13:48 +02:00
openapi-ex_app.json chore: update openapi specs 2024-07-18 08:51:43 +02:00
openapi-ex_app.json.license feat(OpenAPI): Add ex_app scope 2024-07-02 09:12:48 +02:00
openapi-full.json fix(core): Document CSRF token endpoint 2024-07-25 18:04:46 +02:00
openapi-full.json.license feat(TaskProcessingApi): Add endpoint for getting the next task 2024-07-01 17:11:12 +02:00
openapi.json fix(core): Document CSRF token endpoint 2024-07-25 18:04:46 +02:00
openapi.json.license chore: Add SPDX header 2024-06-06 22:53:41 +02:00
register_command.php feat: add command to export certificate bundle 2024-08-01 10:06:50 +02:00
ResponseDefinitions.php fix(taskprocessing): fix cs issues and generate autoloaders 2024-07-25 10:10:32 +02:00
routes.php Merge pull request #45228 from smokris/heartbeat-route 2024-06-18 17:29:30 +02:00
shipped.json feat: Ship downloadlimit 2024-03-07 02:28:03 -08:00
shipped.json.license chore: Add SPDX header 2024-06-06 22:53:41 +02:00
strings.php chore: Add SPDX header 2024-05-27 14:53:40 +02:00