1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/nextcloud_ynh.git synced 2024-09-03 19:55:57 +02:00
Commit graph

4 commits

Author SHA1 Message Date
Maniack Crudelis
8ea155ee6d Complete refactoring
* Refactoring
* Fix upgrade script
* Fix owncloud migration + new helper ynh_handle_app_migration
* Add more informations about ynh_handle_app_migration
* Fix typos, enhance comments, fix spacing
* Rename $dependencies to $pkg_dependencies as matter of homogeneity with other apps
* [enh] Change the label during the migration
2017-09-26 07:18:12 +02:00
Jimmy Monin
041a0ee18d Disable CSPv3 nonces and allow YunoHost fonts data
Problems:
- Due to some unknown problem in the interaction between SSOwat and Nextcloud server authentication, CSP nonces are wrong when you log into Nextcloud from YunoHost portal for the first time (systematically reproduced in a browser private session). The Nextcloud page is hence almost totally blank and you have to refresh the page or click on the Nextcloud logo.
- Due to CSP protection, the YunoHost tile (inline Javascript) is blocked

Solution:
While it's not a totally satisfying solution, a somewhat acceptable workaround to these two problems is to:
- block CSP v3 features (hence nonces), but still allowing CSP v2 features
- allow for "data:" font sources (needed to load YunoHost tile fonts)

This is done via patching Nextcloud sources:
- `ContentSecurityPolicyNonceManager`: disable the CSPv3 browser compatibility detection (return false in every case)
- `EmptyContentSecurityPolicy`: add the "data:" argument in `font-src` default CSP rule.
2017-08-07 22:00:27 +02:00
Jérôme Lebleu
780d925e26 [enh] Update Nextcloud to v10.0.0 with logout patch 2016-08-28 21:54:46 +02:00
Jérôme Lebleu
733d576831 [enh] Patch ownCloud to config the logout URL and set it to SSOwat one 2016-04-04 22:00:04 +02:00