Hye @JimboJoe,
after more investigations, rules from nextCloud and tests :)
L23```more_set_headers Content-Security-Policy "default-src data:;";```
is enough due to **/ynhpanel.css** where yunohost image tile and fonts
are **data:base64**.
There is no SP leaks in this case.
I'll send rectification in this way.
By creating all theses files inside the owncloud folder we obtain a lot of failure. In addition by modifying the fiel lib/base.php we create an other failure. The easiest way (but not the proper) is to disable the integrity control by modifyng the value of $OC_Channel in version.php to sth other than 'stable'...
ownCloud 9.0 comes with improved occ which allows to install easily from
the command-line. This install rewrite uses those new facilities and also uses
the config:import command to set system and LDAP configuration.
Rafi59
bogdanovic
Maniack Crudelis
Jérôme Lebleu
ewilly