Roeland Jago Douma 7276735eb4 Set empty CSP by default ... For #14179 By default responses should have the strictest (and simplest) CSP possible. Only template responses should require an actual CSP. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>		2019-04-16 14:09:39 +02:00
..
Template	Add since tags	2018-04-05 13:18:17 +02:00
ContentSecurityPolicy.php	Set default frame-ancestors to 'self'	2019-01-08 15:36:40 +01:00
DataDisplayResponse.php	Set empty CSP by default	2019-04-16 14:09:39 +02:00
DataDownloadResponse.php	Change @georgehrke's email	2017-11-06 20:38:59 +01:00
DataResponse.php	Set empty CSP by default	2019-04-16 14:09:39 +02:00
DownloadResponse.php	Set empty CSP by default	2019-04-16 14:09:39 +02:00
EmptyContentSecurityPolicy.php	CSP: set nonce for iframes	2019-03-16 20:20:03 +01:00
FileDisplayResponse.php	Set empty CSP by default	2019-04-16 14:09:39 +02:00
ICallbackResponse.php	Update license headers	2017-11-06 16:56:19 +01:00
IOutput.php	Update license headers	2017-11-06 16:56:19 +01:00
JSONResponse.php	Set empty CSP by default	2019-04-16 14:09:39 +02:00
NotFoundResponse.php	Set empty CSP by default	2019-04-16 14:09:39 +02:00
OCSResponse.php	Set empty CSP by default	2019-04-16 14:09:39 +02:00
RedirectResponse.php	Set empty CSP by default	2019-04-16 14:09:39 +02:00
RedirectToDefaultAppResponse.php	Allow apps to redirect to the default app	2019-03-01 09:19:46 +01:00
Response.php	Set empty CSP by default	2019-04-16 14:09:39 +02:00
StandaloneTemplateResponse.php	Add StandaloneTemplateResponse	2019-02-06 11:26:18 +01:00
StreamResponse.php	Set empty CSP by default	2019-04-16 14:09:39 +02:00
StrictContentSecurityPolicy.php	Add stricter CSPs	2018-06-13 14:47:57 +02:00
StrictEvalContentSecurityPolicy.php	Disallow eval on the StrictEvalCSP	2018-07-11 21:12:36 +02:00
StrictInlineContentSecurityPolicy.php	Add stricter CSPs	2018-06-13 14:47:57 +02:00
TemplateResponse.php	Set empty CSP by default	2019-04-16 14:09:39 +02:00
ZipResponse.php	Set empty CSP by default	2019-04-16 14:09:39 +02:00