nextcloud-server

Commit Graph

Author	SHA1	Message	Date
Robin Appelman	775c1848b7	test: don't trigger file cache gc during tests Signed-off-by: Robin Appelman <robin@icewind.nl>	2 weeks ago
Carl Schwan	b41709c8c8	refactor: Fix rebasing issues Signed-off-by: Carl Schwan <carlschwan@kde.org>	2 weeks ago
Côme Chilliet	94102ac464	fix: Change back base.php to have the same behavior as before Isolated OC in its own file instead so that index.php can do finer init. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 weeks ago
Carl Schwan	6fc03681bd	feat: enabled frankenphp worker mode Signed-off-by: Carl Schwan <carlschwan@kde.org>	2 weeks ago
Ferdinand Thiessen	0abaf60352	fix: make sure the core app is loaded Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	3 weeks ago
Côme Chilliet	9c92cc1617	chore: Suppress last known impure static properties We will keep these legacy ones for now. We can search for the ImpureStaticProperty suppression and add special treatement for them in the frankenphp PR if needed. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 weeks ago
Côme Chilliet	1ab09ec753	chore: Apply new coding standard to all files The diff can be checked using: git diff --ignore-all-space --ignore-blank-lines To see only the changes not related to blank lines. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 weeks ago
Git'Fellow	3bbe0ee570	refactor: use strict operator Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>	2 months ago
Carl Schwan	bb4c55c125	refactor: Move copy skeleton step to a file listener Instead of having all user providers call OC_Util::copySkeleton Signed-off-by: Carl Schwan <carlschwan@kde.org>	2 months ago
Carl Schwan	39c14c383b	refactor: remove long deprecated IServerContainer methods Signed-off-by: Carl Schwan <carlschwan@kde.org>	3 months ago
Côme Chilliet	f885d7292f	fix(occ): Do not attempt to send headers on CLI This avoids errors like 'Cannot modify header information - headers already sent', when using --debug-log with occ. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 months ago
Salvatore Martire	2eecf81833	fix: add user id header when redirecting to default app Signed-off-by: Salvatore Martire <4652631+salmart-dev@users.noreply.github.com>	5 months ago
Simon L.	b08fca0abe	fix: fall-back to hardcoded values if debug mode is enabled Signed-off-by: Simon L. <szaimen@e.mail.de>	5 months ago
Simon L.	cdc951ea45	fix: log memory usage for requests based on configured memory limit Signed-off-by: Simon L. <szaimen@e.mail.de>	5 months ago
Ferdinand Thiessen	f7dad729e4	refactor(core): migrate web updater to Vue Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	5 months ago
Côme Chilliet	3c80b7f2b3	fix: Use strict array comparisons in lib/ To avoid surprises with corner cases. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	5 months ago
Carl Schwan	6eabaaf104	refactor: Deprecated user config from IConfig correctly Mark the methods in the interface deprecated instead of just the one in the implementation. Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com>	6 months ago
Côme Chilliet	eb54143c2d	fix: Delete legacy OC_Response Moved the last used method in base.php where it’s called. Ideally we would remove it but it’s not clear whether that would be possible any time soon or even at all. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	9 months ago
Ferdinand Thiessen	660f3f6fd1	refactor: use logical `&&` `\|\|` instead of weak `and` `or` operators Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	9 months ago
Côme Chilliet	22160b9d2b	chore: Add comment to make it clear the bail out for status.php should not be moved above ini_set calls. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	10 months ago
Joas Schilling	3df6d90a4c	Revert "perf(base): Stop setting up the FS for every basic auth request"	10 months ago
Côme Chilliet	34aaa0cf83	fix(status.php): Fix samesite cookies This skips less calls for status.php so that ini vars are correctly set and the code to set samesite cookies has the correct information when Nextcloud is installed in a subpath. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	10 months ago
provokateurin	778c6c0d46	perf(base): Stop setting up the FS for every basic auth request Signed-off-by: provokateurin <kate@provokateurin.de>	10 months ago
Ferdinand Thiessen	7fe272fd74	fix(Coordinator): ensure the core app is loaded first Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	11 months ago
John Molakvoæ	2b50d9b2c5	Revert "perf(base): Stop setting up the FS for every basic auth request"	12 months ago
Daniel Calviño Sánchez	01766b18f8	fix: Fix theming for disabled accounts The Theming app injects the stylesheets for the different themes in the "<header>" element of the page, and those stylesheets are then loaded by the browser from a "Controller" (a plain "Controller", not an "OCSController"). The stylesheets, in turn, may also get some images (like the background) also from the "Controller". When handling a request to "index.php" it is checked whether the user is logged in and, if not, a login is tried. A disabled user is explicitly seen as not logged in, so a login is always tried in that case, but disabled users are also explicitly prevented to log in, so the login also fails. Due to that trying to get any of the themed stylesheets or images with a disabled account (to be able to show the "Account disabled" error page) fails with an HTTP status 401. To solve that, and to avoid touching this basic logic as much as possible, the login exception is now ignored (if the user is disabled) for some specific requests to the Theming app. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>	12 months ago
provokateurin	0eae0e3c06	perf(base): Stop setting up the FS for every basic auth request Signed-off-by: provokateurin <kate@provokateurin.de>	12 months ago
Ferdinand Thiessen	5981b7eb51	chore: apply new CSFixer rules Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> # Conflicts: # apps/settings/lib/SetupChecks/PhpOpcacheSetup.php	12 months ago
Côme Chilliet	e8bc35ec0a	fix(ocs): Return a proper error on JSON decoding failures Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	12 months ago
Josh	54142b2b20	fix(maintenanceMode): Refresh web page when turned off (part 1) Signed-off-by: Josh <josh.t.richards@gmail.com>	1 year ago
Samuel Bizien Filippi	a14cade3ac	feat(core): add cookie_domain config option Signed-off-by: Samuel Bizien Filippi <samuel.bizien-filippi@finances.gouv.fr>	1 year ago
Côme Chilliet	78ff8e233f	fix: Switch lazy object to enabled by default on PHP 8.4 Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Côme Chilliet	2eed6d3a89	feat: Add a configuration toggle for lazy objects in DI Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Ferdinand Thiessen	c21e189850	fix: make core application bootstrapable by coordinator Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Côme Chilliet	7c251e4f96	fix: Remove useless legacy autoloader Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Côme Chilliet	9560e00cf3	chore: Remove useless legacy autoloader for tests Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Louis Chemineau	009d0c550c	fix: Move CSRF check from base to PublicAuth for public.php This currently prevent directly accessing a ressource when clicking on a link on a third party site. Example, clicking on `https://example.com/public.php/dav/files/pqLWcA269zfzXez/?accept=zip` in a GitHub comment. Skipping the check is an issue with password protected shares, as it allows third party sites to request the ressource when the user already entered the password, aka CSRF. So after removing the check from `base.php`, we need to add the it again in the `PublicAuth` plugin. We also add a redirect to be helpful to the user. Warning: this adds the limitation that clicking on a direct download link for password protected shares will redirect you to the password form, and then to the main share view. Fix #52482 Signed-off-by: Louis Chemineau <louis@chmn.me>	1 year ago
Ferdinand Thiessen	22889d4f1d	chore: deprecate `OC_Helper::isReadOnlyConfigEnabled` Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Côme Chilliet	536ccf144c	feat(encryption): Migrate from hooks to events Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Côme Chilliet	20c6d1a7e9	feat: Improve init a bit, and add more profiling steps Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Julius Knorr	3fc9a99521	perf: Add config options to trigger individual and sample profiling using excimer Signed-off-by: Julius Knorr <jus@bitgrid.net>	1 year ago
Côme Chilliet	0cf4f3cc71	fix: Replace all usages of OC_User backend method calls by IUserManager Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Côme Chilliet	b2100484c0	fix: Remove some call and references to deprecated OC_Util class Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Joas Schilling	34bcc53fb9	fix(base.php): Correct order for booting \OC\Server A recent change had broken authentication with an older FastCGI Apache2 module, because the IRequest object got initialised before the fix from self::handleAuthHeaders() copied the authentication headers into the correct $_SERVER variables. Since this part is completely independent from any Nextcloud code it is now done as a first thing within the init() call. Additionally similar issues could happen when another class would boot too early and read other global PHP settings like ini values and default timezone, so those are now also moved to the beginning. Signed-off-by: Joas Schilling <coding@schilljs.com>	1 year ago
Côme Chilliet	f033ef7c18	fix: Migrate all uses of OCP\Template to OCP\Template\ITemplateManager Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Côme Chilliet	71dc34c03c	fix: Deprecate OC_Template, add proper template manager instead Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
provokateurin	dd47daa4a8	fix(Share20): Convert broken hooks to IEventListener Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
DaleBCooper	e1e0b68feb	Fix A+ rating when checking with Nextcloud Security Scan. Due to commit `33d7019` session.cookie_secure=true is not set when accessing /status.php. This results in a degration from A+ to A rating due to missing __Host prefix for nc_sameSiteCookielax and nc_sameSiteCookiestrict cookies.	1 year ago
Côme Chilliet	34139987d6	fix: Replace OC_App calls by IAppManager Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Julius Knorr	d31bc88a23	perf: Log requests using high amount of memory as warning Signed-off-by: Julius Knorr <jus@bitgrid.net>	1 year ago

3 Commits (master)