Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/devnoname120/nextcloud-htmlviewer
Mirror of https://git.mdns.eu/nextcloud/htmlviewer.git
https://github.com/devnoname120/nextcloud-htmlviewer
nextcloud nextcloud-app nextcloud-apps
Last synced: 15 days ago
JSON representation
Mirror of https://git.mdns.eu/nextcloud/htmlviewer.git
- Host: GitHub
- URL: https://github.com/devnoname120/nextcloud-htmlviewer
- Owner: devnoname120
- Created: 2024-05-09T22:03:19.000Z (6 months ago)
- Default Branch: master
- Last Pushed: 2024-09-19T06:00:53.000Z (about 2 months ago)
- Last Synced: 2024-10-16T22:31:45.436Z (30 days ago)
- Topics: nextcloud, nextcloud-app, nextcloud-apps
- Language: Vue
- Homepage: https://github.com/devnoname120/nextcloud-htmlviewer-cron
- Size: 584 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSES/AGPL-3.0-or-later.txt
Awesome Lists containing this project
README
# Html Viewer
> View static HTML files directly in Nextcloud
HTML files can be a great way to illustrate content in an interactive and responsive format.
The HTML viewer app enables viewing and editing of static HTML files directly within Nextcloud.
### Security information
Loading HTML files within the context of Nextcloud carries a risk of exposing user information to third parties, depending on the configuration of the server.
The HTML viewer app uses the sandbox and CSP features for iframes to disable JavaScript and prevent access to user information and websites outside your Nextcloud, but this can not guarantee that no information is ever transferred to third parties.
Administrators should also be aware that some users may not be able to differentiate between the content of an HTML file they have opened and the normal user interface of Nextcloud.
### JavaScript
JavaScript for HTML files is disabled by default. Enabling it is a bad idea and we do not recommend this at all.
Although security features like sandboxing, CSP and CORS limit what can be done, it still means that unknown code is being executed within Nextcloud.
If you still wish to enable JS, this occ command will enable it:
```bash
./occ config:app:set htmlviewer allowJs --value=true --type=boolean
```
### File Size Limit
By default, the app will load HTML files up to 32MB. To change the file size, use this occ command:
```bash
./occ config:app:set htmlviewer maxSize --value=SizeInMegabyte
```
### Iframe Permissions
The app automatically configures the iframe with an CSP for [supported browsers](https://caniuse.com/mdn-api_htmliframeelement_csp) and a sandbox to limit code execution and data access.
Both policies can be changed through config settings with the OCC commands shown below.
Please be aware that the general CSP of your Nextcloud may still block some access regardless of what CSP and sandbox settings you configure.
To change the CSP or sandbox settings, use these occ commands:
```bash
./occ config:app:set htmlviewer csp --value=CustomCspSettings
./occ config:app:set htmlviewer sandbox --value=CustomSandboxSettings
```