@@ 227-235 (lines=9) @@ | ||
224 | ||
225 | // Harden the default security policy |
|
226 | // FIXME: Remove once ownCloud 8.1 is a requirement for the mail app |
|
227 | if(class_exists('\OCP\AppFramework\Http\ContentSecurityPolicy')) { |
|
228 | $policy = new ContentSecurityPolicy(); |
|
229 | $policy->allowEvalScript(false); |
|
230 | $policy->disallowScriptDomain('\'self\''); |
|
231 | $policy->disallowConnectDomain('\'self\''); |
|
232 | $policy->disallowFontDomain('\'self\''); |
|
233 | $policy->disallowMediaDomain('\'self\''); |
|
234 | $htmlResponse->setContentSecurityPolicy($policy); |
|
235 | } |
|
236 | ||
237 | // Enable caching |
|
238 | $htmlResponse->cacheFor(60 * 60); |
@@ 133-141 (lines=9) @@ | ||
130 | $expectedResponse = new \OCA\Mail\Http\HtmlResponse(null); |
|
131 | $expectedResponse->cacheFor(3600); |
|
132 | $expectedResponse->addHeader('Pragma', 'cache'); |
|
133 | if(class_exists('\OCP\AppFramework\Http\ContentSecurityPolicy')) { |
|
134 | $policy = new \OCP\AppFramework\Http\ContentSecurityPolicy(); |
|
135 | $policy->allowEvalScript(false); |
|
136 | $policy->disallowScriptDomain('\'self\''); |
|
137 | $policy->disallowConnectDomain('\'self\''); |
|
138 | $policy->disallowFontDomain('\'self\''); |
|
139 | $policy->disallowMediaDomain('\'self\''); |
|
140 | $expectedResponse->setContentSecurityPolicy($policy); |
|
141 | } |
|
142 | ||
143 | $actualResponse = $this->controller->getHtmlBody($accountId, base64_encode($folderId), $messageId); |
|
144 |