FeaturePolicy.php 2.0 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859
  1. <?php
  2. declare(strict_types=1);
  3. /**
  4. * @copyright Copyright (c) 2019, Roeland Jago Douma <roeland@famdouma.nl>
  5. *
  6. * @author Roeland Jago Douma <roeland@famdouma.nl>
  7. *
  8. * @license GNU AGPL version 3 or any later version
  9. *
  10. * This program is free software: you can redistribute it and/or modify
  11. * it under the terms of the GNU Affero General Public License as
  12. * published by the Free Software Foundation, either version 3 of the
  13. * License, or (at your option) any later version.
  14. *
  15. * This program is distributed in the hope that it will be useful,
  16. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  17. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  18. * GNU Affero General Public License for more details.
  19. *
  20. * You should have received a copy of the GNU Affero General Public License
  21. * along with this program. If not, see <http://www.gnu.org/licenses/>.
  22. *
  23. */
  24. namespace OCP\AppFramework\Http;
  25. /**
  26. * Class FeaturePolicy is a simple helper which allows applications to
  27. * modify the Feature-Policy sent by Nextcloud. Per default only autoplay is allowed
  28. * from the same domain and full screen as well from the same domain.
  29. *
  30. * Even if a value gets modified above defaults will still get appended. Please
  31. * notice that Nextcloud ships already with sensible defaults and those policies
  32. * should require no modification at all for most use-cases.
  33. *
  34. * @since 17.0.0
  35. */
  36. class FeaturePolicy extends EmptyFeaturePolicy {
  37. protected $autoplayDomains = [
  38. '\'self\'',
  39. ];
  40. /** @var string[] of allowed domains that can access the camera */
  41. protected $cameraDomains = [];
  42. protected $fullscreenDomains = [
  43. '\'self\'',
  44. ];
  45. /** @var string[] of allowed domains that can use the geolocation of the device */
  46. protected $geolocationDomains = [];
  47. /** @var string[] of allowed domains that can use the microphone */
  48. protected $microphoneDomains = [];
  49. /** @var string[] of allowed domains that can use the payment API */
  50. protected $paymentDomains = [];
  51. }