Roeland Jago Douma 7276735eb4 Set empty CSP by default ... For #14179 By default responses should have the strictest (and simplest) CSP possible. Only template responses should require an actual CSP. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>		2019-04-16 14:09:39 +07:00
..
ContentSecurityPolicyTest.php	Set default frame-ancestors to 'self'	2019-01-08 15:36:40 +07:00
DataResponseTest.php	Set empty CSP by default	2019-04-16 14:09:39 +07:00
DispatcherTest.php	Fix tests	2018-02-21 10:55:52 +07:00
DownloadResponseTest.php	…
EmptyContentSecurityPolicyTest.php	Add report-uri to CSP	2018-10-21 13:38:32 +07:00
FileDisplayResponseTest.php	Add FileDisplayResponse	2016-09-05 15:09:54 +07:00
HttpTest.php	…
JSONResponseTest.php	Remove not needed 3rdparty app disabling during upgrade for PHP 5.x	2018-01-19 14:00:27 +07:00
OCSResponseTest.php	…
OutputTest.php	add tests for http/output	2016-11-16 15:30:37 +07:00
PublicTemplateResponseTest.php	Add test for PublicTemplateResponse	2018-02-27 12:25:53 +07:00
RedirectResponseTest.php	…
RequestStream.php	…
RequestTest.php	Only trust the X-FORWARDED-HOST header for trusted proxies	2018-12-17 15:54:45 +07:00
ResponseTest.php	Set empty CSP by default	2019-04-16 14:09:39 +07:00
StreamResponseTest.php	…
TemplateResponseTest.php	Remove deprecated core API	2018-01-15 17:54:50 +07:00