Maximilian Bosch 37d6961f33 nixos/nextcloud: add regression test for not delivering code anymore ... PR #277382 didn't fix just an issue with .mjs files for the `forms` app, but an underlying, more problematic issue: for `/nix-apps` & `/store-apps`, the fcgi config for PHP and the block for assets were never reached. That meant that e.g. `/nix-apps/notes/lib/AppInfo/Application.php` returned the PHP source code as text/plain. Considering that there was never a fundamental change to how this config's structure, I'm pretty sure that the issue was pretty much there since the module exists. After consulting the NixOS security team we agreed that this is most likely harmless because you'd have to use private apps with secrets in the raw PHP code of said app. However, this is still problematic because one important assumption - that PHP code is never sent to the browser - is broken which is why we decided on not mentioning this impact in the previous PR from December 2023. To make sure that we don't regress our nginx config, I decided to add the reproducer which fails on 8bbbb228b4 as testcase to our integration tests.		2024-02-10 17:52:19 +01:00
..
basic.nix	nixos/tests/nextcloud: replace activationScript	2023-12-29 03:41:45 +01:00
default.nix	nextcloud28: init at 28.0.0	2023-12-13 15:57:33 -08:00
with-declarative-redis-and-secrets.nix	nixos/nextcloud: Rename extraOptions to settings	2024-01-26 14:22:49 +01:00
with-mysql-and-memcached.nix
with-postgresql-and-redis.nix	nixos/nextcloud: add regression test for not delivering code anymore	2024-02-10 17:52:19 +01:00