nextcloud-server

Commit Graph

Author	SHA1	Message	Date
Ferdinand Thiessen	5981b7eb51	chore: apply new CSFixer rules Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> # Conflicts: # apps/settings/lib/SetupChecks/PhpOpcacheSetup.php	6 months ago
Joas Schilling	8952a4cb77	fix(logger): Fix closure detection when filtering sensitive parameters Signed-off-by: Joas Schilling <coding@schilljs.com>	1 year ago
Ferdinand Thiessen	f3aa004b1c	refactor(encryption): Migrate away from Hooks to typed events Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Louis <louis@chmn.me> Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Joas Schilling	a90921e239	fix(logger): Remove more parameters of other methods Signed-off-by: Joas Schilling <coding@schilljs.com>	1 year ago
Andy Scherzinger	dae7c159f7	chore: Add SPDX header Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Faraz Samapoor	9fa9975bc9	Refactors lib/private/Log. Mainly using PHP8's constructor property promotion. Signed-off-by: Faraz Samapoor <fsa@adlas.at>	3 years ago
Faraz Samapoor	e7cc7653b8	Refactors "strpos" calls in lib/private to improve code readability. Signed-off-by: Faraz Samapoor <fsamapoor@gmail.com>	3 years ago
Max	95a674e238	fix: treat text app session parameters as sensitive values * `PublicSessionController create` receives a share token. * The others receive the parameters for a text session: `document_id`, `session_id`, `session_token`. Even though these are relatively short lived they could be used to retrieve content from the document when leaked. Signed-off-by: Max <max@nextcloud.com>	3 years ago
Julius Härtl	7daa20d309	fix(ExceptionSerializer): encode arguments before filtering the trace This will avoid running into a Nesting level too deep error as the encodeArg calls will limit potential recursive calls on the arguments to a nesting level of 5 Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Arthur Schiwon	2a6f46e689	allow apps to specify methods carrying sensitive parameters … in order to remove them from logging. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	3 years ago
Arthur Schiwon	8b2b5946e6	make placeholder a const for reuse Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	4 years ago
Arthur Schiwon	891c10d09d	fix overwriting original vars when logging Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	4 years ago
Julius Härtl	b235a854d3	Always list the class of an object first Signed-off-by: Julius Härtl <jus@bitgrid.net>	4 years ago
Julius Härtl	950de74d1d	Set a maximum level of encoding nested arguments of exception traces This will make sure that nested objects or arrays do not cause exceeding the maximum nesting level of functions when parsing arguments of an exception trace Signed-off-by: Julius Härtl <jus@bitgrid.net>	4 years ago
Lukas Reschke	b3ddc09895	Sanitize more functions from the encryption app Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	5 years ago
Daniel Kesselberg	74fa8f3f84	Mask password for Redis and RedisCluster on connection failure Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	5 years ago
Gary Kim	b78f3a57d1	Migrate HintException to OCP Signed-off-by: Gary Kim <gary@garykim.dev>	5 years ago
John Molakvoæ (skjnldsv)	215aef3cbd	Update php licenses Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	5 years ago
Joas Schilling	847aa08ebd	Don't log keys on checkSignature Signed-off-by: Joas Schilling <coding@schilljs.com>	5 years ago
Roeland Jago Douma	179de95f81	Avoid huge exception argument logging In some cases it might happen that you have an argument that deep down somewhere has an array with a lot of entries (think thousands). Now before we would just happily print them all. Which would fill the log. Now it will just print the first 5. And add a line that there are N more. If you are on debug level we will still print them all. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Christoph Wurst	d89a75be0b	Update all license headers for Nextcloud 21 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Vincent Petry	9b3361ce87	Don't log params of imagecreatefromstring To prevent flooding the log with actual image data. Signed-off-by: Vincent Petry <vincent@nextcloud.com>	5 years ago
Morris Jobke	065ef14cb0	Move OC_Mount_Config to proper classname and remove OC::$CLASSPATH usage in files_external Signed-off-by: Morris Jobke <hey@morrisjobke.de>	6 years ago
Joas Schilling	a7f26cfe28	Don't log Keys Signed-off-by: Joas Schilling <coding@schilljs.com>	6 years ago
Christoph Wurst	cb057829f7	Update license headers for 19 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	28f8eb5dba	Add visibility to all constants Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	14c996d982	Use elseif instead of else if Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	1b46621cd3	Update license headers for 18 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	5bf3d1bb38	Update license headers Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Roeland Jago Douma	f2ef35dbf1	Fix logger test Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Roeland Jago Douma	bfaca7fc78	Sensitive values handling Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Joas Schilling	a79da346b6	fix class might be undefined Co-Authored-By: blizzz <blizzz@arthur-schiwon.de> Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	d6d1666600	remove args from logging of common-spelled methods dependent on class Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	4ad8d0c0d8	remove setup args from logging Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Morris Jobke	e8739e1392	Remove sensitive SMB arguments from exception log Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Joas Schilling	d8e041a5a2	Don't log parameters on user creation in case of error/exception Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Robin Appelman	99c00972a0	make exception serializer a bit more robust Signed-off-by: Robin Appelman <robin@icewind.nl>	8 years ago
Morris Jobke	a11d198a06	Sanitize parameters in createSessionToken() while logging Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Robin Appelman	f399e1591f	Log classnames of arguments in exception trace Signed-off-by: Robin Appelman <robin@icewind.nl>	8 years ago

39 Commits (master)