'.fread($options['stream'], $options['size']);
					$options['size'] += 5;
					fclose($options['stream']);
					unset($options['stream']);
				}
			}
			// mitigate risk of html downloads by using CSP or force download for IE
			if (!$this->force_download && in_array($options['mimetype'], array('text/html', 'application/xhtml+xml')))
			{
				// use CSP only for current user-agents/versions I was able to positivly test
				if (html::$user_agent == 'chrome' && html::$ua_version >= 24 ||
					// mobile FF 24 on Android does NOT honor CSP!
					html::$user_agent == 'firefox' && !html::$ua_mobile && html::$ua_version >= 24 ||
					html::$user_agent == 'safari' && !html::$ua_mobile && html::$ua_version >= 536 ||	// OS X
					html::$user_agent == 'safari' && html::$ua_mobile && html::$ua_version >= 9537)	// iOS 7
				{
					$csp = "script-src 'none'";	// forbid to execute any javascript
					header("Content-Security-Policy: $csp");
					header("X-Webkit-CSP: $csp");	// Chrome: <= 24, Safari incl. iOS
					//header("X-Content-Security-Policy: $csp");	// FF <= 22
					//error_log(__METHOD__."('$options[path]') ".html::$user_agent.'/'.html::$ua_version.(html::$ua_mobile?'/mobile':'').": using Content-Security-Policy: $csp");
				}
				else	// everything else get's a Content-dispostion: attachment, to be on save side
				{
					//error_log(__METHOD__."('$options[path]') ".html::$user_agent.'/'.html::$ua_version.(html::$ua_mobile?'/mobile':'').": using Content-disposition: attachment");
					$this->force_download = true;
				}
			}
			if ($this->force_download)
			{
				html::content_disposition_header(egw_vfs::basename($options['path']),true);
			}
		}
		return $ok;
	}

	/**
	 * Display an automatic index (listing and properties) for a collection
	 *
	 * @param array $options parameter passing array, index "path" contains requested path
	 */
	protected function autoindex($options)
	{
		$propfind_options = array(
			'path'  => $options['path'],
			'depth' => 1,
		);
		$files = array();
		if (($ret = $this->PROPFIND($propfind_options,$files)) !== true)
		{
			return $ret;	// no collection
		}
		header('Content-type: text/html; charset='.translation::charset());
		echo "\n\n\t\n";
		echo "\t\n";
		echo "\t\n";
		echo "\n\n";

		echo '
WebDAV ';
		list(,$base) = explode(parse_url($GLOBALS['egw_info']['server']['webserver_url'], PHP_URL_PATH), $this->base_uri, 2);
		$path = $base;
		foreach(explode('/',$this->_unslashify($options['path'])) as $n => $name)
		{
			$path .= ($n != 1 ? '/' : '').$name;
			echo html::a_href(htmlspecialchars($name.'/'),$path);
		}
		echo "
\n";

		static $props2show = array(
			'DAV:displayname'      => 'Displayname',
			'DAV:getlastmodified'  => 'Last modified',
			'DAV:getetag'          => 'ETag',
			'DAV:getcontenttype'   => 'Content type',
			'DAV:resourcetype'     => 'Resource type',
			//'DAV:owner'            => 'Owner',
			//'DAV:current-user-privilege-set' => 'current-user-privilege-set',
			//'DAV:getcontentlength' => 'Size',
			//'DAV:sync-token' => 'sync-token',
		);
		$n = 0;
		$collection_props = null;
		foreach($files['files'] as $file)
		{
			if (!isset($collection_props))
			{
				$collection_props = $this->props2array($file['props']);
				echo '
'.lang('Collection listing').': '.htmlspecialchars($collection_props['DAV:displayname'])."
\n";
				continue;	// own entry --> displaying properies later
			}
			if(!$n++)
			{
				echo "\n\t\n\t\t\n\t\t";
				foreach($props2show as $label)
				{
					echo "\t\t\n";
				}
				echo "\t\n";
			}
			$props = $this->props2array($file['props']);
			//echo $file['path']; _debug_array($props);
			$class = $class == 'row_on' ? 'row_off' : 'row_on';

			if (substr($file['path'],-1) == '/')
			{
				$name = basename(substr($file['path'],0,-1)).'/';
			}
			else
			{
				$name = basename($file['path']);
			}

			echo "\t\n\t\t\n\t\t\n";
			foreach($props2show as $prop => $label)
			{
				echo "\t\t\n";
			}
			echo "\t\n";
		}
		if (!$n)
		{
			echo '
'.lang('Collection empty.')."
\n";
		}
		else
		{
			echo "
#
".lang('Name')."
".lang($label)."
$n
".
				html::a_href(htmlspecialchars($name),$base.strtr($file['path'], array(
					'%' => '%25',
					'#' => '%23',
					'?' => '%3F',
				)))."
".($prop=='DAV:getlastmodified'&&!empty($props[$prop])?date('Y-m-d H:i:s',$props[$prop]):$props[$prop])."
\n";
		}
		echo '
'.lang('Properties')."
\n";
		echo "\n\t\n";
		foreach($collection_props as $name => $value)
		{
			$class = $class == 'row_on' ? 'row_off' : 'row_on';
			$parts = explode(':',$name);
			$name = array_pop($parts);
			$ns = implode(':',$parts);
			echo "\t\n\t\t\n";
			echo "\t\t\n\t\n";
		}
		echo "
".lang('Namespace')."
".lang('Name')."
".lang('Value')."
".htmlspecialchars($ns)."
".htmlspecialchars($name)."
".$value."
\n";
		/*$dav = array(1);
		$allow = false;
		$this->OPTIONS($options['path'], $dav, $allow);
		echo "
DAV: ".implode(', ', $dav)."
\n";*/

		echo "\n\n";

		common::egw_exit();
	}

	/**
	 * Format a property value for output
	 *
	 * @param mixed $value
	 * @return string
	 */
	protected function prop_value($value)
	{
		if (is_array($value))
		{
			if (isset($value[0]['ns']))
			{
				$value = $this->_hierarchical_prop_encode($value);
			}
			$value = array2string($value);
		}
		if ($value[0] == '<' && function_exists('tidy_repair_string'))
		{
			$value = tidy_repair_string($value, array(
				'indent'          => true,
				'show-body-only'  => true,
				'output-encoding' => 'utf-8',
				'input-encoding'  => 'utf-8',
				'input-xml'       => true,
				'output-xml'      => true,
				'wrap'            => 0,
			));
		}
		if (($href=preg_match('/\<(D:)?href\>[^<]+\<\/(D:)?href\>/i',$value)))
		{
			$value = preg_replace('/\<(D:)?href\>('.preg_quote($this->base_uri.'/','/').')?([^<]+)\<\/(D:)?href\>/i','<\\1href>\\3',$value);
		}
		$ret = $value[0] == '<'  || strpos($value, "\n") !== false ?
			'
'.htmlspecialchars($value).'
' : htmlspecialchars($value);

		if ($href)
		{
			$ret = str_replace('</a>', '',
				preg_replace('/<a href="(.+)">/', '', $ret));
		}
		return $ret;
	}

	/**
	 * Return numeric indexed array with values for keys 'ns', 'name' and 'val' as array 'ns:name' => 'val'
	 *
	 * @param array $props
	 * @return array
	 */
	protected function props2array(array $props)
	{
		$arr = array();
		foreach($props as $prop)
		{
			$ns_hash = array('DAV:' => 'D');
			switch($prop['ns'])
			{
				case 'DAV:';
					$ns = 'DAV';
					break;
				default:
					$ns = $prop['ns'];
			}
			if (is_array($prop['val']))
			{
				$prop['val'] = $this->_hierarchical_prop_encode($prop['val'], $prop['ns'], $ns_defs='', $ns_hash);
				// hack to show real namespaces instead of not (visibly) defined shortcuts
				unset($ns_hash['DAV:']);
				$value = strtr($v=$this->prop_value($prop['val']),array_flip($ns_hash));
			}
			else
			{
				$value = $this->prop_value($prop['val']);
			}
			$arr[$ns.':'.$prop['name']] = $value;
		}
		return $arr;
	}

	/**
	 * PUT method handler
	 *
	 * Reimplemented to safely rejected PUT with Transfer-Encoding: Chunk, if server does not support it.
	 * Currently on Apache with mod_php and newer Ngix support it.
	 * We reject it with "501 Unimplemented" for fastCGI, if SERVER_SOFTWARE does NOT contain Nginx.
	 * This stops OS X Finder from destroying files.
	 *
	 * @param  array  parameter passing array
	 * @return bool   true on success
	 */
	function PUT(&$options)
	{
		if (strtolower($_SERVER['HTTP_TRANSFER_ENCODING']) == 'chunked' &&
			in_array(php_sapi_name(), array('cgi', 'cgi-fcgi', 'fpm-fcgi')) && !preg_match('/nginx/i', $_SERVER['SERVER_SOFTWARE']))
		{
			error_log(__METHOD__.'() '.$_SERVER['REQUEST_METHOD'].' '.$_SERVER['REQUEST_URI'].' HTTP/1.1');
			error_log(__METHOD__.'() _SERVER[HTTP_TRANSFER_ENCODING='.$_SERVER['HTTP_TRANSFER_ENCODING'].', php_sapi_name()='.php_sapi_name().', _SERVER[SERVER_SOFTWARE]='.$_SERVER['SERVER_SOFTWARE']);
			/*foreach($_SERVER as $name => $value)
			{
				list($type,$name) = explode('_',$name,2);
				if ($type == 'HTTP' || $type == 'CONTENT')
				{
					error_log(__METHOD__.'() '.str_replace(' ','-',ucwords(strtolower(($type=='HTTP'?'':$type.' ').str_replace('_',' ',$name)))).
							': '.($name=='AUTHORIZATION'?'Basic ***************':$value));
				}
			}*/
			error_log(__METHOD__.'() Rejected PUT with Transfer-Encoding: Chunked, as server does NOT support it!');
			// http://www.w3.org/Protocols/rfc2616/rfc2616-sec3.html#sec3.6
			return '501 Unimplemented (Transfer-Encoding: Chunked)';
		}
		return parent::PUT($options);
	}
}