Skip to content

Conversation

@susnux
Copy link
Contributor

@susnux susnux commented Mar 17, 2025

Summary

some leftovers where the request token is used instead of the CSP nonce. in general this makes not much difference - but there are some cases where those values differ.

Checklist

@susnux susnux added bug 3. to review Waiting for reviews labels Mar 17, 2025
@susnux susnux added this to the Nextcloud 32 milestone Mar 17, 2025
@susnux susnux requested a review from a team as a code owner March 17, 2025 11:28
@susnux susnux requested review from nfebe, skjnldsv and sorbaugh and removed request for a team March 17, 2025 11:28
@susnux susnux requested review from artonge and marcelklehr and removed request for sorbaugh April 4, 2025 15:26
@marcelklehr
Copy link
Member

Are community app developers aware of this? I was not

@susnux
Copy link
Contributor Author

susnux commented Apr 7, 2025

Are community app developers aware of this? I was not

It is in the developer upgrade guides since Nextcloud 30 👀
https://docs.nextcloud.com/server/30/developer_manual/app_publishing_maintenance/app_upgrade_guide/upgrade_to_30.html#csp-nonce

But only relevant if you use Webpack, our vite config was adjusted back then to directly make use of it.

some leftovers where the request token is used instead of the CSP nonce.
in general this makes not much difference - but there are some cases
where those values differ.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
@susnux susnux force-pushed the fix/webpack-nonce branch from d839225 to 47734c2 Compare April 7, 2025 12:44
@susnux
Copy link
Contributor Author

susnux commented Apr 7, 2025

/compile

@susnux
Copy link
Contributor Author

susnux commented Apr 7, 2025

/backport to stable31

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
@susnux susnux merged commit f540a69 into master Apr 7, 2025
130 of 132 checks passed
@susnux susnux deleted the fix/webpack-nonce branch April 7, 2025 15:57
@nextcloud-bot nextcloud-bot mentioned this pull request Aug 19, 2025
@skjnldsv skjnldsv modified the milestones: Nextcloud 32, Nextcloud 33 Sep 28, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews bug

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants