93 Commits (master)

Author	SHA1	Message	Date
provokateurin	0c3a872908	feat(CertificateManager): Add option to specify the default certificates bundle path ... Signed-off-by: provokateurin <kate@provokateurin.de>	4 weeks ago
Marcel Müller	b91034b3cf	chore: Add server version to default crawler user agent ... Signed-off-by: Marcel Müller <marcel-mueller@gmx.de>	2 months ago
Ferdinand Thiessen	5b96cca038	chore(Http\Client): fix linting issues ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	6 months ago
Ferdinand Thiessen	5981b7eb51	chore: apply new CSFixer rules ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> # Conflicts: # apps/settings/lib/SetupChecks/PhpOpcacheSetup.php	6 months ago
Daniel Kesselberg	3d0fb7e603	docs(http): Update return type for getBody ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	6 months ago
georglauterbach	4d517a33ba	fix: remove superflous line ... Signed-off-by: georglauterbach <44545919+georglauterbach@users.noreply.github.com>	1 year ago
georglauterbach	387cd8b771	fix: do not query CNAME if A succeeded already ... Signed-off-by: georglauterbach <44545919+georglauterbach@users.noreply.github.com>	1 year ago
Thomas Citharel	dcd27fd986	feat(http-client): expose default request timeout constant to be used instead of magic number 30 ... Will be used to set default where we are able to override the default timeout. See https://github.com/nextcloud/server/pull/48418 Signed-off-by: Thomas Citharel <tcit@tcit.fr>	1 year ago
Daniel Kesselberg	6be00432b7	chore: always execute parse_url in preventLocalAddress ... This change should make it easier to spot wrong uses of the HTTP client on development setups where allow_local_remote_servers is usually true. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	1 year ago
provokateurin	9836e9b164	chore(deps): Update nextcloud/coding-standard to v1.3.1 ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Daniel Kesselberg	af6de04e9e	style: update codestyle for coding-standard 1.2.3 ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	1 year ago
Andy Scherzinger	dae7c159f7	chore: Add SPDX header ... Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Benjamin Gaussorgues	7e4be1fcfd	fix(dns): detect disabled IPv6 support in DNS pinning ... Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	2 years ago
Côme Chilliet	82fbab4632	fix: Swap method and uri parameter in request to match upstream order ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Ferdinand Thiessen	01d5af66be	feat(IClient): Add `request` function to do arbitrary HTTP requests ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
Joas Schilling	ecb111cec7	fix(federation): Allow cloud federation providers to handle unsuccessful return codes ... Otherwise they are put to retry and will immediately trigger bruteforce protection infinitely Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
Robin Kluth	414f8f1f2d	Include `hostName:$port` for Host access violation message as well ... Signed-off-by: Robin Kluth <Commifreak@users.noreply.github.com>	2 years ago
Robin Kluth	25c0021137	Log Host/IP in `LocalServerException` for `Host violates local access rules` ... Signed-off-by: Robin Kluth <Commifreak@users.noreply.github.com>	2 years ago
Robin Kluth	d70cd5add2	Log Host/IP in `LocalServerException` for `Host violates local access rules` ... Signed-off-by: Robin Kluth <Commifreak@users.noreply.github.com>	2 years ago
jithin-space	7c11414c9b	added patch method ... Signed-off-by: jithin-space <jithin.thankachan@gpsrenewables.com>	2 years ago
Joas Schilling	aa5f037af7	chore: apply changes from Nextcloud coding standards 1.1.1 ... Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	2 years ago
Daniel Kesselberg	f8f985602b	test: add tests for dns pin middleware ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	2 years ago
Daniel Kesselberg	03f1f1ed2e	enh: skip processing for empty response ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	2 years ago
Daniel Kesselberg	eab46bdfe6	feat: add switch to disable dns pinning ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	2 years ago
Joas Schilling	ec6728d710	feat(HTTPClient): Provide wrapped access to Guzzle's asyncRequest() ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Robin Appelman	e7ab30f5d8	log performance events for http requests ... Signed-off-by: Robin Appelman <robin@icewind.nl>	3 years ago
Côme Chilliet	426c0341ff	Use typed version of IConfig::getSystemValue as much as possible ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	f5c361cf44	composer run cs:fix ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Christoph Wurst	ce259435c2	Fix DNS Pin Middleware throwing for public IPs ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Christoph Wurst	8aea25b5b9	Add remote host validation API ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Christoph Wurst	d4b9b010b0	Rename LocalAddressChecker methods to lower case ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Simon L	11108e8032	Revert "fix external storages access" ... Signed-off-by: szaimen <szaimen@e.mail.de>	3 years ago
Côme Chilliet	31117fa7c7	Fix tests for nested v4 in v6 ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	7ac688a2e5	Use new dependency to normalize IPs ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	a907b74c2a	Add missing urldecode and idn_to_utf8 calls to local address checker ... The call to idn_to_utf8 call is actually to apply normalization Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
luz paz	368f83095d	Fix typos in lib/private subdirectory ... Found via `codespell -q 3 -S l10n -L jus ./lib/private` Signed-off-by: luz paz <luzpaz@github.com>	3 years ago
Côme Chilliet	c5ffd7ce32	Use Symfony IpUtils to check for local IP ranges ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Côme Chilliet	707b46bb01	Check for local IPs nested in IPv6 as well ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Côme Chilliet	d0830432a7	Refactor local IP if and set strict to true for in_array ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Côme Chilliet	bd9aff47b6	Improve local IP detection ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
szaimen	2ad53742f2	fix external storages access ... Signed-off-by: szaimen <szaimen@e.mail.de>	4 years ago
Côme Chilliet	d23c7d245c	Improve local domain detection ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Côme Chilliet	6be7aa112f	Migrate from ILogger to LoggerInterface in lib/private ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Vincent Petry	9b6a1cc8ae	Send images to imaginary docker to generate previews ... Signed-off-by: Carl Schwan <carl@carlschwan.eu> Co-Authored-by: Vincent Petry <vincent@nextcloud.com>	4 years ago
Lukas Reschke	84d9b17dc7	Check for !== false instead ... Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	5 years ago
Lukas Reschke	b0cef8827d	Check if dns_get_record returns non-false ... `dns_get_record` can return false which results in exceptions such as the ones shown in https://github.com/nextcloud/server/issues/27870. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	5 years ago
Sanpi	81c272a8a5	Fixes recursion count incrementation ... Signed-off-by: Sanpi <sanpi@homecomputing.fr>	5 years ago
Daniel Kesselberg	b6530e5e82	Ignore subdomain for soa queries ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	5 years ago
Aaron Ball	484913dc31	Fix DnsPinMiddleware resolve pinning bug ... Libcurl expects the value of the CURLOPT_RESOLVE configurations to be an array of strings, those strings containing a comma delimited list of resolved IPs for each host:port combination. The original code here does create that array with the host:port:ip combination, but multiple ips for a single host:port result in additional array entries, rather than adding them to the end of the string with a comma. Per the libcurl docs, the `CURLOPT_RESOLVE` array entries should match the syntax `host:port:address[,address]`. This creates a function-scoped associative array which uses `host:port` as the key (which are supposed to be unique and this ensures that), and the value is an array containing IP strings (ipv4 or ipv6). Once the associative array is populated, it is then set to the CURLOPT_RESOLVE array, imploding the ip arrays using a comma delimiter so the array syntax matches the expected by libcurl. Note that this reorders the "foreach ip" and "foreach port" loops. Rather than looping over ips then ports, we now loop over ports then ips, since ports are part of the unique host:port map, and multiple ips can exist therein. Signed-off-by: Aaron Ball <nullspoon@oper.io>	5 years ago
John Molakvoæ (skjnldsv)	215aef3cbd	Update php licenses ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	5 years ago