I don't think rendering HTML files inside the ownCloud page is a good idea.
In a shared ownCloud, you could end up with malicious HTML files,
containing JavaScript or other active content, running in the security
context of your ownCloud session. I am by no means a security experts,
by even as a security layman it sounds like an XSS vulnerability to me.
Best
Björn
Am 10.04.14 11:06, schrieb Vincent Petry:
> Hello,
>
> Sorry for the late answer, it seems the mailing list server had an issue
> and I just got your email now.
>
> The WebDAV file list rendering is a feature of the "SabreDAV" plugin
> project and doesn't belong to ownCloud. You might need to modify the
> code of SabreDAV in 3rdparty and I have no idea how to do this.
>
> Furthermore, you should know that in ownCloud 7 this web interface of
> WebDAV that shows the file list will be removed for security reasons.
>
> I suppose it should be possible somehow to write an ownCloud app to view
> HTML pages that are hosted on ownCloud (basically adding a "static web
> server" functionality to ownCloud), but this is no trivial task as it
> might need to provide its own remote.php implementation and map the
> calls to the corresponding ownCloud APIs.
>
> Cheers,
>
> Vincent
>
> On 03/12/2014 03:04 PM, m.carpen wrote:
>>
>> many thanks Vincent,
>> since I temporary solved the problem adding the webdav link to the
>> portal, I was asking if would be possible at least change the way the
>> WebDAV render the file system on the page, actually is very poor. I
>> mean..., maybe changing the remote.php file? or adding some extension,
>> well I don't know...
>> I add here also a screenshot of the browser.
>>
>> Cheers,
>> Michele
>>
>>
>> On 12/03/2014 14:58, Vincent Petry wrote:
>>> Hello Michele,
>>>
>>> It is currently not possible to directly render HTML files in the web UI.
>>> I also haven't heard of any 3rd party app that makes this possible,
>>> sorry.
>>>
>>> Cheers,
>>>
>>> Vincent
>>>
>>> On 03/12/2014 02:52 PM, m.carpen wrote:
>>>> Hi,
>>>> I report this question on the mailing list for completeness.
>>>>
>>>> I've an ownCloud installation and I can share my files between users
>>>> in the folder data.
>>>> Some of these files are html files and contains some javascript
>>>> (sometime php).
>>>> Actually using the ownCloud interface I'm only able to see those files
>>>> as sources or edit them, the html pages are not rendered.
>>>> In order to see how html appears I can only add a webdav link as an
>>>> external site and navigate the html file trough webDav.
>>>> Is it possibile to see html files rendered as web pages directly from
>>>> the shared folder?
>>>>
>>>> thanks in advance,
>>>> Michele
>>>>
>>> _______________________________________________
>>> User mailing list
>>> [email protected]
>>> http://mailman.owncloud.org/mailman/listinfo/user
>>
>>
>>
>>
>> _______________________________________________
>> User mailing list
>> [email protected]
>> http://mailman.owncloud.org/mailman/listinfo/user
>>
>
> _______________________________________________
> User mailing list
> [email protected]
> http://mailman.owncloud.org/mailman/listinfo/user
>
--
| Bjoern Kahl +++ Siegburg +++ Germany |
| "mls@-my-domain-" +++ www.bjoern-kahl.de |
| Languages: German, English, Ancient Latin (a bit :-)) |
signature.asc
Description: OpenPGP digital signature
_______________________________________________ User mailing list [email protected] http://mailman.owncloud.org/mailman/listinfo/user
