mirror of
https://github.com/the-djmaze/snappymail.git
synced 2026-08-29 12:09:20 +03:00
133 lines
3.8 KiB
PHP
133 lines
3.8 KiB
PHP
<?php
|
|
|
|
namespace OCA\SnappyMail\Controller;
|
|
|
|
use OCA\SnappyMail\Util\SnappyMailHelper;
|
|
|
|
use OCP\AppFramework\Controller;
|
|
use OCP\AppFramework\Http\ContentSecurityPolicy;
|
|
use OCP\AppFramework\Http\TemplateResponse;
|
|
|
|
class PageController extends Controller
|
|
{
|
|
/**
|
|
* @NoAdminRequired
|
|
* @NoCSRFRequired
|
|
*/
|
|
public function index()
|
|
{
|
|
$config = \OC::$server->getConfig();
|
|
|
|
if ($config->getAppValue('snappymail', 'snappymail-embed')) {
|
|
return static::index_embed();
|
|
}
|
|
|
|
\OC::$server->getNavigationManager()->setActiveEntry('snappymail');
|
|
|
|
\OCP\Util::addScript('snappymail', 'snappymail');
|
|
\OCP\Util::addStyle('snappymail', 'style');
|
|
|
|
$query = '';
|
|
$aCredentials = SnappyMailHelper::getLoginCredentials();
|
|
if ($aCredentials[0] && $aCredentials[1]) {
|
|
$query = '?sso&hash=' . \RainLoop\Api::CreateUserSsoHash($aCredentials[0] && $aCredentials[1]);
|
|
}
|
|
|
|
$params = [
|
|
'snappymail-iframe-url' => SnappyMailHelper::normalizeUrl(SnappyMailHelper::getAppUrl()) . $query
|
|
];
|
|
|
|
$response = new TemplateResponse('snappymail', 'index', $params);
|
|
|
|
$csp = new ContentSecurityPolicy();
|
|
$csp->addAllowedFrameDomain("'self'");
|
|
$response->setContentSecurityPolicy($csp);
|
|
|
|
return $response;
|
|
}
|
|
|
|
/**
|
|
* @NoAdminRequired
|
|
* @NoCSRFRequired
|
|
*/
|
|
public function appGet()
|
|
{
|
|
SnappyMailHelper::startApp();
|
|
\RainLoop\Service::Handle();
|
|
exit;
|
|
}
|
|
|
|
/**
|
|
* @NoAdminRequired
|
|
* @NoCSRFRequired
|
|
*/
|
|
public function appPost()
|
|
{
|
|
SnappyMailHelper::startApp(true);
|
|
}
|
|
|
|
/**
|
|
* @NoAdminRequired
|
|
* @NoCSRFRequired
|
|
*/
|
|
public function indexPost()
|
|
{
|
|
SnappyMailHelper::startApp(true);
|
|
}
|
|
|
|
/**
|
|
* Draft code to run without using an iframe
|
|
*/
|
|
private static function index_embed()
|
|
{
|
|
if (!empty($_SERVER['QUERY_STRING'])) {
|
|
SnappyMailHelper::startApp(true);
|
|
}
|
|
|
|
\OC::$server->getNavigationManager()->setActiveEntry('snappymail');
|
|
|
|
\OCP\Util::addStyle('snappymail', 'embed');
|
|
|
|
SnappyMailHelper::startApp();
|
|
$oConfig = \RainLoop\Api::Config();
|
|
$oActions = \RainLoop\Api::Actions();
|
|
$oHttp = \MailSo\Base\Http::SingletonInstance();
|
|
$oServiceActions = new \RainLoop\ServiceActions($oHttp, $oActions);
|
|
$sAppJsMin = $oConfig->Get('labs', 'use_app_debug_js', false) ? '' : '.min';
|
|
$sAppCssMin = $oConfig->Get('labs', 'use_app_debug_css', false) ? '' : '.min';
|
|
$sLanguage = $oActions->GetLanguage(false);
|
|
|
|
$sScriptNonce = \OC::$server->getContentSecurityPolicyNonceManager()->getNonce();
|
|
// $sScriptNonce = \SnappyMail\UUID::generate();
|
|
// \RainLoop\Service::setCSP($sScriptNonce);
|
|
|
|
$params = [
|
|
'LoadingDescriptionEsc' => \htmlspecialchars($oConfig->Get('webmail', 'loading_description', 'SnappyMail'), ENT_QUOTES|ENT_IGNORE, 'UTF-8'),
|
|
'BaseTemplates' => \RainLoop\Utils::ClearHtmlOutput($oServiceActions->compileTemplates(false)),
|
|
'BaseAppBootScript' => \file_get_contents(APP_VERSION_ROOT_PATH.'static/js'.($sAppJsMin ? '/min' : '').'/boot'.$sAppJsMin.'.js'),
|
|
'BaseAppBootScriptNonce' => $sScriptNonce,
|
|
'BaseLanguage' => $oActions->compileLanguage($sLanguage, false),
|
|
];
|
|
|
|
\OCP\Util::addHeader('style', ['id'=>'app-boot-css'], \file_get_contents(APP_VERSION_ROOT_PATH.'static/css/boot'.$sAppCssMin.'.css'));
|
|
\OCP\Util::addHeader('link', ['type'=>'text/css','rel'=>'stylesheet','href'=>\RainLoop\Utils::WebStaticPath('css/app'.$sAppCssMin.'.css')], '');
|
|
\OCP\Util::addHeader('style', ['id'=>'app-theme-style','data-href'=>$oActions->ThemeLink(false)],
|
|
\preg_replace(
|
|
'/\\s*([:;{},]+)\\s*/s',
|
|
'$1',
|
|
$oActions->compileCss($oActions->GetTheme(false), false)
|
|
));
|
|
|
|
$response = new TemplateResponse('snappymail', 'index_embed', $params);
|
|
|
|
$csp = new ContentSecurityPolicy();
|
|
$csp->addAllowedScriptDomain("'self'");
|
|
$csp->useStrictDynamic(true);
|
|
$csp->allowEvalScript(true); // $csp->addAllowedScriptDomain("'unsafe-eval'");
|
|
$csp->addAllowedStyleDomain("'self'");
|
|
$response->setContentSecurityPolicy($csp);
|
|
|
|
return $response;
|
|
}
|
|
|
|
}
|