| 1 | 1 |
new file mode 100644 |
| ... | ... |
@@ -0,0 +1,70 @@ |
| 1 |
+<?php |
|
| 2 |
+/** |
|
| 3 |
+ * @copyright 2021 Double Bastion LLC <www.doublebastion.com> |
|
| 4 |
+ * |
|
| 5 |
+ * @author Double Bastion LLC |
|
| 6 |
+ * |
|
| 7 |
+ * @license GNU AGPL version 3 or any later version |
|
| 8 |
+ * |
|
| 9 |
+ * This program is free software; you can redistribute it and/or |
|
| 10 |
+ * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE |
|
| 11 |
+ * License as published by the Free Software Foundation; either |
|
| 12 |
+ * version 3 of the License, or any later version. |
|
| 13 |
+ * |
|
| 14 |
+ * This program is distributed in the hope that it will be useful, |
|
| 15 |
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
| 16 |
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
| 17 |
+ * GNU AFFERO GENERAL PUBLIC LICENSE for more details. |
|
| 18 |
+ * |
|
| 19 |
+ * You should have received a copy of the GNU Affero General Public |
|
| 20 |
+ * License along with this program. If not, see <http://www.gnu.org/licenses/>. |
|
| 21 |
+ * |
|
| 22 |
+ */ |
|
| 23 |
+ |
|
| 24 |
+declare(strict_types=1); |
|
| 25 |
+ |
|
| 26 |
+namespace OCA\SMSRelentless\Controller; |
|
| 27 |
+ |
|
| 28 |
+use \OCP\IRequest; |
|
| 29 |
+use \OCP\AppFramework\Http\TemplateResponse; |
|
| 30 |
+use \OCP\AppFramework\Http\DataResponse; |
|
| 31 |
+use \OCP\AppFramework\Controller; |
|
| 32 |
+use \OCP\AppFramework\Http\ContentSecurityPolicy; |
|
| 33 |
+ |
|
| 34 |
+ |
|
| 35 |
+class PageController extends Controller {
|
|
| 36 |
+ |
|
| 37 |
+ public function __construct($AppName, IRequest $request){
|
|
| 38 |
+ parent::__construct($AppName, $request); |
|
| 39 |
+ } |
|
| 40 |
+ |
|
| 41 |
+ /** |
|
| 42 |
+ * CAUTION: the @Stuff turns off security checks; for this page no admin is |
|
| 43 |
+ * required and no CSRF check. If you don't know what CSRF is, read |
|
| 44 |
+ * it up in the docs or you might create a security hole. This is |
|
| 45 |
+ * basically the only required method to add this exemption, don't |
|
| 46 |
+ * add it to any other method if you don't exactly know what it does |
|
| 47 |
+ * |
|
| 48 |
+ * @NoAdminRequired |
|
| 49 |
+ * @NoCSRFRequired |
|
| 50 |
+ */ |
|
| 51 |
+ |
|
| 52 |
+ public function index() {
|
|
| 53 |
+ |
|
| 54 |
+ $response = new TemplateResponse('sms_relentless', 'index');
|
|
| 55 |
+ |
|
| 56 |
+ $csp = new ContentSecurityPolicy(); |
|
| 57 |
+ |
|
| 58 |
+ $csp->addAllowedFontDomain('data:');
|
|
| 59 |
+ |
|
| 60 |
+ $csp->addAllowedFrameDomain('\'self\'');
|
|
| 61 |
+ |
|
| 62 |
+ $csp->addAllowedObjectDomain('\'self\'');
|
|
| 63 |
+ |
|
| 64 |
+ $response->setContentSecurityPolicy($csp); |
|
| 65 |
+ |
|
| 66 |
+ return $response; |
|
| 67 |
+ |
|
| 68 |
+ } |
|
| 69 |
+ |
|
| 70 |
+} |