StorageContoroller content security policy prevents serving HTML sites

[ylebre]

The content security policy for the StorageController is too strict to serve HTML sites.

Adding this:

use OCP\AppFramework\Http\EmptyContentSecurityPolicy;

To the top of the file, and adding a content security policy in the 'respond' function:

                $policy = new EmptyContentSecurityPolicy();
                $policy->addAllowedStyleDomain("*");
                $policy->addAllowedStyleDomain("data:");
                $policy->addAllowedScriptDomain("*");
                $policy->addAllowedImageDomain("*");
                $policy->addAllowedFontDomain("*");
                $policy->addAllowedConnectDomain("*");
                $policy->allowInlineStyle(true);
                $policy->allowInlineScript(true);
                $policy->allowEvalScript(true);
                $result->setContentSecurityPolicy($policy);

will allow simply-present to work on solid-nextcloud.

[ylebre]

Fixed in 23613ed