mirror of
https://github.com/nextcloud/all-in-one.git
synced 2026-05-29 23:10:08 +00:00
3d322e2fe2
- Add SecurityHeadersMiddleware that sets Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, X-Permitted-Cross-Domain-Policies, X-DNS-Prefetch-Control, Referrer-Policy, and X-Robots-Tag on all responses - Register SecurityHeadersMiddleware in index.php - Add click-handlers.js for CSP-compliant event handling (data-confirm, data-stop-event-propagation) - Update toggle-dark-mode.js to attach click handler via addEventListener - Remove inline onclick from theme toggle button in layout.twig - Replace all inline onclick with data-confirm in containers.twig, community-containers.twig, and optional-containers.twig Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com> Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/d87889ba-d2ad-4d76-b257-2afd725dac28
23 lines
679 B
Twig
23 lines
679 B
Twig
<html>
|
|
<head>
|
|
<title>AIO</title>
|
|
<link rel="stylesheet" href="style.css?v9" media="all" />
|
|
<link rel="icon" href="img/favicon.png">
|
|
<script type="text/javascript" src="forms.js?v1"></script>
|
|
<script type="text/javascript" src="toggle-dark-mode.js?v1"></script>
|
|
</head>
|
|
|
|
<body>
|
|
<div class="wrapper">
|
|
{% block body %}{% endblock %}
|
|
</div>
|
|
<div id="overlay">
|
|
<div class="loader"></div>
|
|
<iframe name="overlay-log" id="overlay-log"></iframe>
|
|
</div>
|
|
<button id="theme-toggle">
|
|
<span id="theme-icon"></span>
|
|
</button>
|
|
</body>
|
|
</html>
|