@@ 218-226 (lines=9) @@ | ||
215 | ||
216 | // Harden the default security policy |
|
217 | // FIXME: Remove once ownCloud 8.1 is a requirement for the mail app |
|
218 | if(class_exists('\OCP\AppFramework\Http\ContentSecurityPolicy')) { |
|
219 | $policy = new ContentSecurityPolicy(); |
|
220 | $policy->allowEvalScript(false); |
|
221 | $policy->disallowScriptDomain('\'self\''); |
|
222 | $policy->disallowConnectDomain('\'self\''); |
|
223 | $policy->disallowFontDomain('\'self\''); |
|
224 | $policy->disallowMediaDomain('\'self\''); |
|
225 | $htmlResponse->setContentSecurityPolicy($policy); |
|
226 | } |
|
227 | ||
228 | // Enable caching |
|
229 | $htmlResponse->cacheFor(60 * 60); |
@@ 140-148 (lines=9) @@ | ||
137 | $expectedResponse = new \OCA\Mail\Http\HtmlResponse(null); |
|
138 | $expectedResponse->cacheFor(3600); |
|
139 | $expectedResponse->addHeader('Pragma', 'cache'); |
|
140 | if(class_exists('\OCP\AppFramework\Http\ContentSecurityPolicy')) { |
|
141 | $policy = new \OCP\AppFramework\Http\ContentSecurityPolicy(); |
|
142 | $policy->allowEvalScript(false); |
|
143 | $policy->disallowScriptDomain('\'self\''); |
|
144 | $policy->disallowConnectDomain('\'self\''); |
|
145 | $policy->disallowFontDomain('\'self\''); |
|
146 | $policy->disallowMediaDomain('\'self\''); |
|
147 | $expectedResponse->setContentSecurityPolicy($policy); |
|
148 | } |
|
149 | ||
150 | $actualResponse = $this->controller->getHtmlBody($accountId, base64_encode($folderId), $messageId); |
|
151 |