-
-
Notifications
You must be signed in to change notification settings - Fork 4.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Migrate header check to setupcheck API #44067
Conversation
27eee79
to
225cf90
Compare
/compile / |
@@ -68,7 +68,7 @@ public function run(): SetupResult { | |||
]; | |||
|
|||
foreach ($providers as $provider) { | |||
foreach ($this->runHEAD($this->urlGenerator->getWebroot() . $provider) as $response) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If that is removed, then drop also runHEAD
function?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Still used in other checks I think but yeah we could move all of them.
1f7d36d
to
dd211d0
Compare
/compile / |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If domain contains only one dot (xxxxx.yyy
), we could also advise to use HSTS includeSubDomains
and preload
(https://hstspreload.org/)
Signed-off-by: Côme Chilliet <[email protected]>
Signed-off-by: Côme Chilliet <[email protected]>
Signed-off-by: Côme Chilliet <[email protected]>
…ementation Signed-off-by: Côme Chilliet <[email protected]>
Signed-off-by: Côme Chilliet <[email protected]>
7b00b81
to
99e967a
Compare
/compile amend |
Signed-off-by: nextcloud-command <[email protected]>
99e967a
to
58ae7e4
Compare
Signed-off-by: Côme Chilliet <[email protected]>
I do not have any knowledge about this, I’d say that would be a followup, let’s migrate the feature first. |
See #41364
Summary
Security related header check migrated to new API and done from backend now.
TODO:
Checklist