1. 26 Mar, 2015 2 commits
  2. 02 Mar, 2015 1 commit
    • Lukas Reschke's avatar
      Let users configure security headers in their Webserver · bbd5f284
      Lukas Reschke authored
      Doing this in the PHP code is not the right approach for multiple reasons:
      
      1. A bug in the PHP code prevents them from being added to the response.
      2. They are only added when something is served via PHP and not in other cases (that makes for example the newest IE UXSS which is not yet patched by Microsoft exploitable on ownCloud)
      3. Some headers such as the Strict-Transport-Security might require custom modifications by administrators. This was not possible before and lead to buggy situations.
      
      This pull request moves those headers out of the PHP code and adds a security check to the admin settings performed via JS.
      bbd5f284
  3. 26 Feb, 2015 1 commit
  4. 23 Feb, 2015 1 commit
  5. 16 Feb, 2015 2 commits
  6. 29 Oct, 2014 1 commit
  7. 19 May, 2014 1 commit
  8. 13 May, 2014 1 commit
  9. 12 May, 2014 1 commit
  10. 04 May, 2014 1 commit
    • Lukas Reschke's avatar
      Cleanup code a little bit · 0b7d9e26
      Lukas Reschke authored
      - Use OCP\Response constants instead of the HTTP error code
      - Use checkAppEnabled() instead of OC_App::isEnabled with an if statement
      - Remove uneeded variable $baseURL
      - Rename $isvalid to $isValid
      0b7d9e26
  11. 21 Apr, 2014 1 commit
  12. 14 Mar, 2014 1 commit
  13. 06 Feb, 2014 1 commit
  14. 26 Jan, 2014 1 commit
    • Martial Saunois's avatar
      New user agent added for the Freebox. · c2ed8d5a
      Martial Saunois authored
      The Freebox is the multimedia device of a french Internet provider: Free. This device provides a seedbox which uses the user agent "Mozilla/5.0". In the "Content-Disposition" header, if the "filename" key is used with the "filename*=UTF-8''" value, the seedbox does not take care about the header and saves the file name with the origin URL. This patch brings the support for the Freebox users.
      c2ed8d5a
  15. 19 Dec, 2013 1 commit
  16. 10 Dec, 2013 2 commits
  17. 30 Sep, 2013 1 commit
  18. 10 Jun, 2013 1 commit
  19. 16 Oct, 2012 1 commit
  20. 07 Sep, 2012 1 commit
  21. 18 Feb, 2012 1 commit
  22. 17 Feb, 2012 2 commits
  23. 16 Feb, 2012 1 commit
  24. 13 Feb, 2012 5 commits
  25. 12 Feb, 2012 3 commits