1
0
mirror of https://github.com/chylex/Nextcloud-News.git synced 2025-05-12 07:34:05 +02:00
This commit is contained in:
Bernhard Posselt 2016-04-26 20:47:46 +02:00
parent 699bbd7cb8
commit b5e65e051f

View File

@ -1,6 +1,6 @@
# Sync API v2 (Draft)
The **News app** offers a RESTful API which can be used to sync folders, feeds and items.
The **News app** offers a RESTful API which can be used to sync folders, feeds and items. The API also supports [CORS](https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS) which means that you can access the API from your browser using JavaScript.
## API Stability Contract
@ -95,8 +95,6 @@ The response body is a JSON structure that looks like this:
}
```
The API also supports [CORS](https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS) which means that you can access the API from your browser using JavaScript.
## Security Guidelines
Read the following notes carefully to prevent being subject to security exploits:
* All string fields in a JSON response unless explicitly noted otherwise are provided in without sanitation. This means that if you do not escape it properly before rendering you will be vulnerable to [XSS](https://www.owasp.org/index.php/Cross-site_Scripting_%28XSS%29) attacks