`GET` should be allowed even without Ajax header to allow downloading files, or show files in the viewer. All other requests could be guarded, but this should not. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> |
||
|---|---|---|
| .. | ||
| bootstrap | ||
| auth.feature | ||
| avatar.feature | ||
| contacts-menu.feature | ||
| maintenance-mode.feature | ||
| ocs-v1.feature | ||
| provisioning-v1.feature | ||
| provisioning-v2.feature | ||
| ratelimiting.feature | ||