nextcloud/core
Roeland Jago Douma 4b70c9f89d
Add referrer policy setup check
Fixes #9122

Based on https://www.w3.org/TR/referrer-policy/ and
https://scotthelme.co.uk/a-new-security-header-referrer-policy/

Setting a sane Referrer-Policy will tell the browser if/when to send
referrer headers when accessing a link from Nextcloud. When configured
properly this results in less tracking and less leaking of (possibly)
sensitive urls

* Fix tests

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-06-04 09:21:35 +02:00
..
Command Add human readable description to migration steps 2018-05-30 21:28:05 +02:00
Controller Merge pull request #9531 from remyj38/master 2018-05-22 16:31:30 +02:00
Middleware Update license headers 2017-11-06 16:56:19 +01:00
Migrations Add human readable description to migration steps 2018-05-30 21:28:05 +02:00
ajax move log constants to ILogger 2018-04-26 10:45:52 +02:00
css Allow to specify custom text on admin password confirmation dialogs 2018-05-24 14:01:58 +02:00
doc changed to nextcloud 2016-06-22 08:20:23 +02:00
fonts Add TTF of OpenSand-{Ligh,Semibold} 2018-02-19 12:34:49 +01:00
img Move quota icon to core 2018-05-03 10:32:16 +02:00
js Add referrer policy setup check 2018-06-04 09:21:35 +02:00
l10n [tx-robot] updated from transifex 2018-06-03 00:12:47 +00:00
search Move search to proper Controller 2018-03-09 14:36:48 +01:00
skeleton ownCloud -> Nextcloud 2016-07-28 15:47:04 +02:00
templates Add data-id to settings navigation 2018-05-08 13:14:02 +02:00
vendor Bump autosize to 4.0.2 2018-05-17 16:42:16 +02:00
Application.php Update license headers 2017-11-06 16:56:19 +01:00
register_command.php Emit event when running ./occ db:add-missing-indices 2018-05-24 18:03:10 +02:00
routes.php Improve login flow 2018-04-08 13:42:36 +02:00
shipped.json Add missing version requirement to OAuth2 app 2017-05-22 09:56:49 +02:00
strings.php Update with robin 2016-07-21 18:13:58 +02:00