{"id":15136218,"url":"https://github.com/devnoname120/nextcloud-htmlviewer","last_synced_at":"2026-02-17T19:01:59.081Z","repository":{"id":240342318,"uuid":"798487527","full_name":"devnoname120/nextcloud-htmlviewer","owner":"devnoname120","description":"Mirror of https://git.mdns.eu/nextcloud/htmlviewer.git","archived":false,"fork":false,"pushed_at":"2025-10-10T06:00:48.000Z","size":1175,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-10-14T21:39:54.077Z","etag":null,"topics":["nextcloud","nextcloud-app","nextcloud-apps"],"latest_commit_sha":null,"homepage":"https://github.com/devnoname120/nextcloud-htmlviewer-cron","language":"Vue","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/devnoname120.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSES/AGPL-3.0-or-later.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-05-09T22:03:19.000Z","updated_at":"2025-10-10T06:00:52.000Z","dependencies_parsed_at":"2024-05-18T07:20:47.031Z","dependency_job_id":"821c4c1f-e6cd-48c9-bd68-6537b66ad5ac","html_url":"https://github.com/devnoname120/nextcloud-htmlviewer","commit_stats":{"total_commits":34,"total_committers":1,"mean_commits":34.0,"dds":0.0,"last_synced_commit":"27d05c83e575ab89623e27f2301168edc66984e5"},"previous_names":["devnoname120/nextcloud-htmlviewer"],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/devnoname120/nextcloud-htmlviewer","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/devnoname120%2Fnextcloud-htmlviewer","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/devnoname120%2Fnextcloud-htmlviewer/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/devnoname120%2Fnextcloud-htmlviewer/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/devnoname120%2Fnextcloud-htmlviewer/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/devnoname120","download_url":"https://codeload.github.com/devnoname120/nextcloud-htmlviewer/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/devnoname120%2Fnextcloud-htmlviewer/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29554386,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-17T18:16:07.221Z","status":"ssl_error","status_checked_at":"2026-02-17T18:16:04.782Z","response_time":100,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["nextcloud","nextcloud-app","nextcloud-apps"],"created_at":"2024-09-26T06:04:35.539Z","updated_at":"2026-02-17T19:01:59.075Z","avatar_url":"https://github.com/devnoname120.png","language":"Vue","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Html Viewer\n\n\u003e View static HTML files directly in Nextcloud\n\nHTML files can be a great way to illustrate content in an interactive and responsive format.\nThe HTML viewer app enables viewing and editing of static HTML files directly within Nextcloud.\n\n## Security information\n\nLoading HTML files within the context of Nextcloud carries a risk of exposing user information to third parties, depending on the configuration of the server.\nThe HTML viewer app uses the sandbox and CSP features for iframes to disable JavaScript and prevent access to user information and websites outside your Nextcloud, but this can not guarantee\nthat no information is ever transferred to third parties.\n\nAdministrators should also be aware that some users may not be able to differentiate between the content of an HTML file they have opened and the normal user interface of Nextcloud.\n\n## Support\n- [Matrix Chat](https://matrix.to/#/#htmlviewer:chat.passwordsapp.org)\n\n## Settings\n\n#### Enable Links\n\nBy default, links in the HTML files can only be opened with CRTL+click.\nLinks with the `target=\"_blank\"` attribute can be enabled by setting a custom sandbox value that includes the permission `allow-popups`.\nOtherwise, the \"newTabLinks\" feature can be enabled to set the permissions automatically and convert any links without `target=\"_blank\"` to include it.\n\n```bash\n./occ config:app:set htmlviewer newTabLinks --value=true --type=boolean\n```\n\n#### Enable JavaScript\n\nJavaScript for HTML files is disabled by default. Enabling it is a bad idea and we do not recommend this at all.\nAlthough security features like sandboxing, CSP and CORS limit what can be done, it still means that unknown code is being executed within Nextcloud.\n\nIf you still wish to enable JS, this occ command will enable it:\n\n```bash\n./occ config:app:set htmlviewer allowJs --value=true --type=boolean\n```\n\n**Note:** If you set a custom CSP or Sandbox value, this feature may not work if your CSP/Sandbox values do not allow JS execution.\nHowever, you must still enable this feature if you use a custom CSO/Sandbox if you want to allow JS.\n\n#### Set File Size Limit\n\nBy default, the app will load HTML files up to 32MB. To change the file size, use this occ command:\n\n```bash\n./occ config:app:set htmlviewer maxSize --value=SizeInMegabyte\n```\n\n#### Change CSP and Iframe Permissions\n\nThe app automatically configures the iframe with an CSP for [supported browsers](https://caniuse.com/mdn-api_htmliframeelement_csp) and a sandbox to limit code execution and data access.\nBoth policies can be changed through config settings with the OCC commands shown below.\nPlease be aware that the general CSP of your Nextcloud may still block some access regardless of what CSP and sandbox settings you configure.\n\nTo change the CSP or sandbox settings, use these occ commands:\n\n```bash\n./occ config:app:set htmlviewer csp --value=YourCustomCSP\n./occ config:app:set htmlviewer sandbox --value=YourCustomSandbox\n```\n\n[Documentation of CSP directives.](https://developer.mozilla.org/docs/Web/HTTP/Reference/Headers/Content-Security-Policy#directives)\n[Documentation of Sandbox permissions.](https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/iframe#sandbox)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdevnoname120%2Fnextcloud-htmlviewer","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdevnoname120%2Fnextcloud-htmlviewer","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdevnoname120%2Fnextcloud-htmlviewer/lists"}