Go to file
Lukas Reschke b20174bdad Allow AppFramework applications to specify a custom CSP header
This change allows AppFramework applications to specify a custom CSP header for example when the default policy is too strict. Furthermore this allows us to partially migrate away from CSS and allowed eval() in our JavaScript components.

Legacy ownCloud components will still use the previous policy. Application developers can use this as following in their controllers:
```php
$response = new TemplateResponse('activity', 'list', []);
$cspHelper = new ContentSecurityPolicyHelper();
$cspHelper->addAllowedScriptDomain('www.owncloud.org');
$response->addHeader('Content-Security-Policy', $cspHelper->getPolicy());
return $response;
```

Fixes https://github.com/owncloud/core/issues/11857 which is a pre-requisite for https://github.com/owncloud/core/issues/13458 and https://github.com/owncloud/core/issues/11925
2015-02-16 11:00:41 +01:00
.idea Add newline that was removed by 15be763d46 2014-12-10 09:38:32 +01:00
3rdparty@a32d3924bd Update SabreDAV to 1.8.12 2015-01-23 11:12:40 +01:00
apps [tx-robot] updated from transifex 2015-02-15 01:54:31 -05:00
build cleaning up the build directory 2014-12-10 10:07:22 +01:00
config Allow AppFramework applications to specify a custom CSP header 2015-02-16 11:00:41 +01:00
core [tx-robot] updated from transifex 2015-02-16 01:54:30 -05:00
l10n ignore minified js, owncloud/news#719 2015-02-05 15:48:58 +01:00
lib Allow AppFramework applications to specify a custom CSP header 2015-02-16 11:00:41 +01:00
ocs OCS API for server-to-server sharing 2014-12-04 13:18:13 +01:00
settings [tx-robot] updated from transifex 2015-02-16 01:54:30 -05:00
tests Allow AppFramework applications to specify a custom CSP header 2015-02-16 11:00:41 +01:00
themes Gitorious => Github 2012-08-26 02:39:42 +03:00
.bowerrc ability to add bower resources 2014-11-03 20:54:40 +01:00
.gitignore Add provisioning_api app 2014-12-24 22:15:20 +01:00
.gitmodules use https as submodule url 2014-03-21 19:38:22 +01:00
.htaccess Setting default charset to UTF-8 in .htaccess and .user.ini 2015-02-10 09:39:06 +01:00
.jshintrc enable laxbreak option in jshintrc to comply with our coding guide lines 2014-11-04 12:51:54 +01:00
.scrutinizer.yml bower jquery-ui - exported changes to a separate css file 2014-12-13 09:47:34 +01:00
.tag Add .tag file to make tar balls tracable 2014-06-14 17:40:32 +02:00
.user.ini Setting default charset to UTF-8 in .htaccess and .user.ini 2015-02-10 09:39:06 +01:00
AUTHORS Add myself as author 2014-09-19 17:24:12 +02:00
CONTRIBUTING.md Unit tests are a must have for any changed code 2015-01-21 11:15:32 +01:00
COPYING-AGPL Really add AGPL file 2011-02-09 15:12:09 +00:00
COPYING-README correct icon license, we use Elementary icons, not Silk anymore 2014-07-15 11:35:49 +02:00
README.md version up 2015-01-11 16:17:57 +01:00
autotest-external.sh Setup a docker container that holds a webdav instance to test files_external 2014-12-17 21:50:35 +01:00
autotest-hhvm.sh Adding autotest-hhvm.sh 2014-12-18 10:21:15 +01:00
autotest-js.sh remove 'set -e' - causes issues during ci execution 2014-09-12 15:42:50 +02:00
autotest.cmd Restore the development config after running the tests 2014-12-02 12:41:33 +01:00
autotest.sh Correctly run all tests again when no file is specified 2014-12-09 16:36:41 +01:00
bower.json bump jquery.strengthify to 0.4.1 2015-01-06 13:48:58 +01:00
buildjsdocs.sh Added script to build the JS documentation 2014-10-31 13:27:36 +01:00
console.php Check for the posix extension - refs https://github.com/owncloud/core/pull/13282#issuecomment-69602645 2015-01-12 20:17:02 +01:00
cron.php Use the TempManager to handle temporary files 2014-10-24 12:18:49 +02:00
db_structure.xml Revert "Improve: Index for file_map" 2015-02-13 15:15:28 +01:00
index.html Try to prefer index.php over index.html in the same directory 2013-04-24 15:11:53 +02:00
index.php Show warning for PHP versions older than 5.4.0 2015-02-05 11:41:00 +01:00
indie.json add indie.json for Indie App Store listing 2014-06-29 22:03:24 +02:00
issue_template.md Also add secret 2014-12-19 10:57:46 +01:00
occ Use a more universal shebang 2014-11-19 17:34:03 +01:00
public.php Add sabredav plugin to check if a user has access to an app 2014-11-17 15:50:24 +01:00
remote.php Add sabredav plugin to check if a user has access to an app 2014-11-17 15:50:24 +01:00
robots.txt Add robot.txt 2013-01-28 16:39:53 -06:00
status.php reduce OC_Preferences, OC_Config and \OCP\Config usage 2014-12-08 22:42:37 +01:00
version.php Update version to a higher one then before 2015-02-13 15:24:53 +01:00

README.md

ownCloud

ownCloud gives you freedom and control over your own data. A personal cloud which runs on your own server.

Build Status on Jenkins CI

Git master: Build Status

Quality:

  • Scrutinizer: Scrutinizer Quality Score
  • CodeClimate: Code Climate

Installation instructions

http://doc.owncloud.org/server/8.0/developer_manual/app/index.html

Contribution Guidelines

http://owncloud.org/contribute/

Get in touch

Important notice on translations

Please submit translations via Transifex: https://www.transifex.com/projects/p/owncloud/

Transifex

For more detailed information about translations: http://doc.owncloud.org/server/8.0/developer_manual/core/translation.html