sascha
/
nextcloud-server
mirror of https://github.com/nextcloud/server.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nextcloud-server/tests/lib/AppFramework
History
Ferdinand Thiessen 2916e5df7e
feat: Provide CSP nonce as `<meta>` element 
This way we use the CSP nonce for dynamically loaded scripts.
Important to notice: The CSP nonce must NOT be injected in `content` as
this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors).

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
 		2024-08-13 10:32:44 +07:00
..
Bootstrap chore: Add SPDX header 2024-05-13 17:41:36 +07:00
Controller chore: Add SPDX header 2024-05-13 17:41:36 +07:00
Db chore: Add SPDX header 2024-05-13 17:41:36 +07:00
DependencyInjection chore: Add SPDX header 2024-05-13 17:41:36 +07:00
Http test: Adjust tests for CSP nonce 2024-08-13 10:06:32 +07:00
Middleware feat: Provide CSP nonce as `<meta>` element 2024-08-13 10:32:44 +07:00
OCS chore: Add SPDX header 2024-05-13 17:41:36 +07:00
Routing chore: Add SPDX header 2024-05-13 17:41:36 +07:00
Services chore: Add SPDX header 2024-05-13 17:41:36 +07:00
Utility chore: Add SPDX header 2024-05-13 17:41:36 +07:00
AppTest.php chore: Add SPDX header 2024-05-13 17:41:36 +07:00