nextcloud/core/js
Lukas Reschke f2d63d3518 Disable automatic evaluation of responses
If a response to a $.ajax() request returns a content type of "application/javascript"
JQuery would previously execute the response body. This is a pretty unexpected
behaviour and can result in a bypass of our Content-Security-Policy as well as
multiple unexpected XSS vectors.
2015-09-15 11:42:13 +02:00
..
tests Add apps unit test 2015-08-30 17:14:57 +02:00
apps.js Fix controls bar calculation 2015-08-28 12:23:57 +02:00
avatar.js
backgroundjobs.js add admin documentation hints to Federated Cloud Sharing and cron 2015-04-09 12:07:05 +02:00
compatibility.js
config.js
config.php Fix regression 2015-08-24 17:38:32 +02:00
core.json Load backbone when running unit tests 2015-08-11 11:35:21 +02:00
eventsource.js
installation.js
jquery-showpassword.js
jquery.avatar.js Remove requesttoken for avatars 2015-08-23 16:49:12 +02:00
jquery.ocdialog.js Resize filepicker on window size change 2015-05-06 11:00:23 +02:00
js.js Disable automatic evaluation of responses 2015-09-15 11:42:13 +02:00
l10n.js
login.js show feedback spinner for log in process 2015-08-27 21:08:46 +02:00
lostpassword.js
maintenance-check.js Use OC.webroot instead of calculating the URL 2015-05-11 17:01:57 +02:00
mimetype.js Javascript mimetype icon resolver 2015-07-06 16:32:10 +02:00
mimetypelist.js simpler style for filetype icons 2015-08-27 19:20:49 +02:00
multiselect.js use proper triangle for multiselect dropdowns as well 2015-09-03 00:35:09 +02:00
oc-backbone.js make available as OC.Backbone to avoid conflicts 2015-08-06 12:08:42 +02:00
oc-dialogs.js Move calls to Files.getMimeIcon to OC.MimeType.getIconUrl 2015-07-09 13:40:13 +02:00
oc-requesttoken.js Do not add sensitive request headers for cross domain requests 2015-09-15 11:42:13 +02:00
octemplate.js
placeholder.js use normal font weight instead of bold for image placeholders 2015-05-22 03:26:30 +02:00
placeholders.js
setup.js Remove remainings of mssql 2015-07-29 18:19:31 +02:00
setupchecks.js Move remaining setupchecks to new fomat 2015-08-18 14:42:57 +02:00
share.js fix share icons of shared items being placed off on mobile 2015-08-26 10:27:55 +02:00
singleselect.js
tags.js
update-notification.js Use OC.Notification for update notifications 2015-05-03 17:26:03 +02:00
update.js Keep update page when there are warnings 2015-07-07 13:38:24 +02:00
visitortimezone.js