From 18e2fc92b3be6d56ade7c32a71c52a62d0de041d Mon Sep 17 00:00:00 2001
From: dish <pyrox@pyrox.dev>
Date: Sat, 17 May 2025 16:32:35 -0400
Subject: [PATCH] [marvin.anubis] Nextcloud: update rules

---
 .../anubis-files/src/policies/nextcloud.yaml    | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/packages/anubis-files/src/policies/nextcloud.yaml b/packages/anubis-files/src/policies/nextcloud.yaml
index a656e781..771c1c49 100644
--- a/packages/anubis-files/src/policies/nextcloud.yaml
+++ b/packages/anubis-files/src/policies/nextcloud.yaml
@@ -23,6 +23,23 @@ bots:
     path_regex: ^/s/.*$
     action: ALLOW
 
+  # Allow clients to load assets to not break public shares
+  - name: allow-assets
+    action: ALLOW
+    expression:
+      any:
+        # Dist files from nextcloud core
+        - 'path.startsWith("/dist/")'
+        # Core Nextcloud files
+        - 'path.startsWith("/js/core")'
+        - 'path.startsWith("/core/css/")'
+        # Viewer app files
+        - 'path.startsWith("/apps/viewer")'
+        # Theme CSS
+        - 'path.startsWith("/apps/theming/")'
+        # Public DAV endpoint
+        - 'path.startsWith("/public.php/dav/files/")'
+
   - import: (data)/common/keep-internet-working.yaml
   - import: CUSTOM/challenge/generic-browser.yaml
 
-- 
2.51.2