1 | 1 |
new file mode 100644 |
... | ... |
@@ -0,0 +1,70 @@ |
1 |
+<?php |
|
2 |
+/** |
|
3 |
+ * @copyright 2021 Double Bastion LLC <www.doublebastion.com> |
|
4 |
+ * |
|
5 |
+ * @author Double Bastion LLC |
|
6 |
+ * |
|
7 |
+ * @license GNU AGPL version 3 or any later version |
|
8 |
+ * |
|
9 |
+ * This program is free software; you can redistribute it and/or |
|
10 |
+ * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE |
|
11 |
+ * License as published by the Free Software Foundation; either |
|
12 |
+ * version 3 of the License, or any later version. |
|
13 |
+ * |
|
14 |
+ * This program is distributed in the hope that it will be useful, |
|
15 |
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
16 |
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
17 |
+ * GNU AFFERO GENERAL PUBLIC LICENSE for more details. |
|
18 |
+ * |
|
19 |
+ * You should have received a copy of the GNU Affero General Public |
|
20 |
+ * License along with this program. If not, see <http://www.gnu.org/licenses/>. |
|
21 |
+ * |
|
22 |
+ */ |
|
23 |
+ |
|
24 |
+declare(strict_types=1); |
|
25 |
+ |
|
26 |
+namespace OCA\SMSRelentless\Controller; |
|
27 |
+ |
|
28 |
+use \OCP\IRequest; |
|
29 |
+use \OCP\AppFramework\Http\TemplateResponse; |
|
30 |
+use \OCP\AppFramework\Http\DataResponse; |
|
31 |
+use \OCP\AppFramework\Controller; |
|
32 |
+use \OCP\AppFramework\Http\ContentSecurityPolicy; |
|
33 |
+ |
|
34 |
+ |
|
35 |
+class PageController extends Controller { |
|
36 |
+ |
|
37 |
+ public function __construct($AppName, IRequest $request){ |
|
38 |
+ parent::__construct($AppName, $request); |
|
39 |
+ } |
|
40 |
+ |
|
41 |
+ /** |
|
42 |
+ * CAUTION: the @Stuff turns off security checks; for this page no admin is |
|
43 |
+ * required and no CSRF check. If you don't know what CSRF is, read |
|
44 |
+ * it up in the docs or you might create a security hole. This is |
|
45 |
+ * basically the only required method to add this exemption, don't |
|
46 |
+ * add it to any other method if you don't exactly know what it does |
|
47 |
+ * |
|
48 |
+ * @NoAdminRequired |
|
49 |
+ * @NoCSRFRequired |
|
50 |
+ */ |
|
51 |
+ |
|
52 |
+ public function index() { |
|
53 |
+ |
|
54 |
+ $response = new TemplateResponse('sms_relentless', 'index'); |
|
55 |
+ |
|
56 |
+ $csp = new ContentSecurityPolicy(); |
|
57 |
+ |
|
58 |
+ $csp->addAllowedFontDomain('data:'); |
|
59 |
+ |
|
60 |
+ $csp->addAllowedFrameDomain('\'self\''); |
|
61 |
+ |
|
62 |
+ $csp->addAllowedObjectDomain('\'self\''); |
|
63 |
+ |
|
64 |
+ $response->setContentSecurityPolicy($csp); |
|
65 |
+ |
|
66 |
+ return $response; |
|
67 |
+ |
|
68 |
+ } |
|
69 |
+ |
|
70 |
+} |