stable
Clone or download
Read-only
Note that the sandboxing have been relaxed to add `allow-same-origin` because ONLYOFFICE want to access the local storage. This means the sandboxing is now mostly an illusion. Tuleap can be completly compromised in case of a sec issue in ONLYOFFICE or if an untrusted value is set as the ONLYOFFICE document server URL. Part of story #27555: display Office documents stored in the Document plugin Change-Id: I34e28a7cbdf527e6651433fcf58658bb8b90fd73
Modified Files
Name | ||||
---|---|---|---|---|
A | plugins/onlyoffice/include/Download/OnlyOfficeDownloadDocumentTokenGenerator.php | +31 | −0 | Go to diff View file |
A | plugins/onlyoffice/include/Download/OnlyOfficeDownloadDocumentTokenGeneratorDBStore.php | +63 | −0 | Go to diff View file |
M | plugins/onlyoffice/include/Open/AllowedFileExtensions.php | +11 | −2 | Go to diff View file |
A | plugins/onlyoffice/include/Open/Editor/OnlyOfficeDocumentConfig.php | +40 | −0 | Go to diff View file |
A | plugins/onlyoffice/include/Open/Editor/OnlyOfficeDocumentConfigProvider.php | +77 | −0 | Go to diff View file |
A | plugins/onlyoffice/include/Open/Editor/OnlyOfficeEditorConfig.php | +48 | −0 | Go to diff View file |
A | plugins/onlyoffice/include/Open/Editor/OnlyOfficeEditorUserConfig.php | +39 | −0 | Go to diff View file |
A | plugins/onlyoffice/include/Open/Editor/OnlyOfficeGlobalEditorJWTokenProvider.php | +70 | −0 | Go to diff View file |
A | plugins/onlyoffice/include/Open/Editor/ProvideOnlyOfficeConfigDocument.php | +35 | −0 | Go to diff View file |
A | plugins/onlyoffice/include/Open/Editor/ProvideOnlyOfficeGlobalEditorJWToken.php | +35 | −0 | Go to diff View file |
M | plugins/onlyoffice/include/Open/OnlyOfficeEditorController.php | +41 | −17 | Go to diff View file |
M | plugins/onlyoffice/include/Open/OnlyOfficeEditorPresenter.php | +1 | −0 | Go to diff View file |
M | plugins/onlyoffice/include/onlyofficePlugin.php | +15 | −0 | Go to diff View file |
M | plugins/onlyoffice/scripts/onlyoffice-editor.ts | +15 | −2 | Go to diff View file |
M | plugins/onlyoffice/templates/editor.mustache | +1 | −1 | Go to diff View file |
A | plugins/onlyoffice/tests/unit/Download/OnlyOfficeDownloadDocumentTokenGeneratorDBStoreTest.php | +57 | −0 | Go to diff View file |
A | plugins/onlyoffice/tests/unit/Open/Editor/OnlyOfficeDocumentConfigProviderTest.php | +106 | −0 | Go to diff View file |
A | plugins/onlyoffice/tests/unit/Open/Editor/OnlyOfficeGlobalEditorJWTokenProviderTest.php | +116 | −0 | Go to diff View file |