| @@ 140-148 (lines=9) @@ | ||
| 137 | $expectedResponse = new \OCA\Mail\Http\HtmlResponse(null); |
|
| 138 | $expectedResponse->cacheFor(3600); |
|
| 139 | $expectedResponse->addHeader('Pragma', 'cache'); |
|
| 140 | if(class_exists('\OCP\AppFramework\Http\ContentSecurityPolicy')) { |
|
| 141 | $policy = new \OCP\AppFramework\Http\ContentSecurityPolicy(); |
|
| 142 | $policy->allowEvalScript(false); |
|
| 143 | $policy->disallowScriptDomain('\'self\''); |
|
| 144 | $policy->disallowConnectDomain('\'self\''); |
|
| 145 | $policy->disallowFontDomain('\'self\''); |
|
| 146 | $policy->disallowMediaDomain('\'self\''); |
|
| 147 | $expectedResponse->setContentSecurityPolicy($policy); |
|
| 148 | } |
|
| 149 | ||
| 150 | $actualResponse = $this->controller->getHtmlBody($accountId, base64_encode($folderId), $messageId); |
|
| 151 | ||
| @@ 211-219 (lines=9) @@ | ||
| 208 | ||
| 209 | // Harden the default security policy |
|
| 210 | // FIXME: Remove once ownCloud 8.1 is a requirement for the mail app |
|
| 211 | if(class_exists('\OCP\AppFramework\Http\ContentSecurityPolicy')) { |
|
| 212 | $policy = new ContentSecurityPolicy(); |
|
| 213 | $policy->allowEvalScript(false); |
|
| 214 | $policy->disallowScriptDomain('\'self\''); |
|
| 215 | $policy->disallowConnectDomain('\'self\''); |
|
| 216 | $policy->disallowFontDomain('\'self\''); |
|
| 217 | $policy->disallowMediaDomain('\'self\''); |
|
| 218 | $htmlResponse->setContentSecurityPolicy($policy); |
|
| 219 | } |
|
| 220 | ||
| 221 | // Enable caching |
|
| 222 | $htmlResponse->cacheFor(60 * 60); |
|