576 Commits (07bf0099a1d02eacb813e2c899c04282bbbbaea2)

Author	SHA1	Message	Date
Robin Appelman	b9b8db6176	fix: log error when writing stream to dav file ... Signed-off-by: Robin Appelman <robin@icewind.nl>	4 months ago
Louis Chemineau	009d0c550c	fix: Move CSRF check from base to PublicAuth for public.php ... This currently prevent directly accessing a ressource when clicking on a link on a third party site. Example, clicking on `https://example.com/public.php/dav/files/pqLWcA269zfzXez/?accept=zip` in a GitHub comment. Skipping the check is an issue with password protected shares, as it allows third party sites to request the ressource when the user already entered the password, aka CSRF. So after removing the check from `base.php`, we need to add the it again in the `PublicAuth` plugin. We also add a redirect to be helpful to the user. **Warning**: this adds the limitation that clicking on a direct download link for password protected shares will redirect you to the password form, and then to the main share view. Fix #52482 Signed-off-by: Louis Chemineau <louis@chmn.me>	5 months ago
Ferdinand Thiessen	01db539d0a	chore: move streamCopy implementation from `OC_Helper` to `OCP\Files` ... The function was already there but called the legacy version. So moved the implementation and migrated all usages of it. Sadly the interface was slightly different so adjusted it to be compatible with both legacy and the OCP one. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	5 months ago
provokateurin	78a175fc74	refactor: Apply rector refactorings ... Signed-off-by: provokateurin <kate@provokateurin.de>	5 months ago
John Molakvoæ (skjnldsv)	b286bca485	fix(dav): remove unnecessary plugin getHTTPMethods ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	5 months ago
John Molakvoæ (skjnldsv)	4495794a0b	feat(dav): allow uploading folders to public shares ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	5 months ago
provokateurin	46f5b07322	feat(dav): Enable chunked upload for public shares ... Signed-off-by: provokateurin <kate@provokateurin.de>	5 months ago
provokateurin	7f0953d520	refactor(dav): Replace baseuri manipulation with RootCollection for public shares ... Signed-off-by: provokateurin <kate@provokateurin.de>	5 months ago
provokateurin	e90e3a70fa	feat(dav): Allow share principals ... Signed-off-by: provokateurin <kate@provokateurin.de>	5 months ago
Joas Schilling	7964f338dc	fix(throttler): Remove the sleep from the throttler that throws ... The sleep is not adding benefit when it's being aborted with 429 in other cases anyway. Signed-off-by: Joas Schilling <coding@schilljs.com>	5 months ago
skjnldsv	58aaddeca5	fix(dav): check the owner displayName scope before giving attribute ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	5 months ago
Ferdinand Thiessen	b4255a9652	fix(dav): allow uploading of files with long filenames ... A filename must be less or equal 255 characters, but when adding the `.part` and `.ocfiletransfer` extensions we might overflow this limit. So we should also use filename hashes for uploading when the file has a long filename, similar like when we are uploading to the user storage directly. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	6 months ago
Ferdinand Thiessen	6141ab1da6	refactor(dav): simplify length header handling ... Reduce nesting and drop duplicated sections. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	6 months ago
Ferdinand Thiessen	ba3c504812	feat(files_sharing): add WebDAV property for the `hide-download` state of shares ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	6 months ago
Robin Appelman	2b0116f0eb	fix: don't have sabre/dav send it's own reponse if we already send the zip response ... Signed-off-by: Robin Appelman <robin@icewind.nl>	6 months ago
Richard Steinmetz	246da73a36	fix(oauth2): retain support for legacy ownCloud clients ... Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>	6 months ago
Marcel Klehr	14cd98c989	fix(dav): Give proper HTTP status code on MKCOL when quota exceeded ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	6 months ago
Ferdinand Thiessen	fa63e646d4	fix(dav): do not require CSRF for safe and indempotent HTTP methods ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	7 months ago
Louis Chemineau	c2f2f21673	feat: Support deleting metadata from WebDAV ... The `$value` will be `null` if the update is wrapped inside a `<d:remove>...</d:remove>` block. Signed-off-by: Louis Chemineau <louis@chmn.me>	7 months ago
Ferdinand Thiessen	845693582f	fix(dav): Handle end of stream in `File::put` ... If the stream is aborted and the callback wrapper returns false (or null as it happened in some cases), we should not try to write to the storage but abort the operation. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	8 months ago
Côme Chilliet	64863c9d46	chore: Apply new rector configuration to apps folder ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	8 months ago
Côme Chilliet	ed5b7ae161	chore: re-apply current rector configuration to apps folder ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	8 months ago
Côme Chilliet	a3685551f7	fix: Replace isInstalled calls with isEnabledForAnyone or isEnabledForUser ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	8 months ago
Robin Appelman	4978cd3c21	fix: use relative paths for upload locks ... Signed-off-by: Robin Appelman <robin@icewind.nl>	8 months ago
Daniel Kesselberg	99ae669e39	fix: Replace the TypeError to prevent exposing the installation path ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	8 months ago
Robin Appelman	9193cd664e	fix: block moving files to it's own parent with dav ... Signed-off-by: Robin Appelman <robin@icewind.nl>	9 months ago
Git'Fellow	36d6b0f1e6	refactor: Use Http framework where possible ... Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>	10 months ago
Robin Appelman	ca241baac0	fix: log which file cannot be opened ... Signed-off-by: Robin Appelman <robin@icewind.nl>	10 months ago
Louis Chemineau	8be6a7c7dd	fix: Throw exception when copy failed ... Signed-off-by: Louis Chemineau <louis@chmn.me>	10 months ago
grnd-alt	8d953aeb8d	refactor(tags): move favorite event dispatching to tags.php ... Signed-off-by: grnd-alt <salimbelakkaf@outlook.de>	10 months ago
grnd-alt	2d02d83597	fix(dav): add activity logging for favorites in dav ... Signed-off-by: grnd-alt <salimbelakkaf@outlook.de>	10 months ago
John Molakvoæ	63b74dc506	chore(config): set min supported desktop to `2.7.0` ... Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com> Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	10 months ago
skjnldsv	8c0f8db6ca	feat(config): add `maximum.supported.desktop.version` ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	11 months ago
Daniel Kesselberg	ca3733de23	fix: Re-throwing the TypeError to prevent exposing the installation path ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	11 months ago
Daniel Kesselberg	6b383faf41	Revert "fix(dav): Always respond custom error page on exceptions" ... This reverts commit 9992e7d439. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	11 months ago
Daniel Kesselberg	cb6840fea5	Revert "fix: Override start method of \Sabre\DAV\Server to remove exception output" ... This reverts commit e202896a74. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	11 months ago
fenn-cs	dd6d7a0aab	fix(Federation): Show some icon for federated users on shares ... Signed-off-by: nfebe <fenn25.fn@gmail.com>	11 months ago
Robin Appelman	19ec79b313	fix: smuggle storage id to metadata insert queries ... Signed-off-by: Robin Appelman <robin@icewind.nl>	11 months ago
provokateurin	e8426996f5	fix(psalm): Fix some newly detected issues ... Signed-off-by: provokateurin <kate@provokateurin.de>	12 months ago
provokateurin	381077028a	refactor(apps): Use constructor property promotion when possible ... Signed-off-by: provokateurin <kate@provokateurin.de>	12 months ago
Côme Chilliet	1580c8612b	chore(apps): Apply new rector configuration to autouse classes ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	12 months ago
Ferdinand Thiessen	e0c00af3bf	fix(dav): Emit `BeforeZipCreatedEvent` when creating folder zip archive ... This is required to not break behavior on zip download (apps should be able to react to zip download especially for shares). Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Ferdinand Thiessen	d66e16b07e	feat(dav): New `ZipFolderPlugin` which allows to download folders using GET requests ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Côme Chilliet	1a4978c4ea	chore: Apply rector configuration to apps folder ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
provokateurin	9836e9b164	chore(deps): Update nextcloud/coding-standard to v1.3.1 ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Louis Chemineau	e202896a74	fix: Override start method of \Sabre\DAV\Server to remove exception output ... Signed-off-by: Louis Chemineau <louis@chmn.me>	1 year ago
Côme Chilliet	801733e523	fix: Remove OCP\Files\Storage interface deprecated since version 9 ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Anna Larch	160866c52d	fix(dav): set string type for sanitizeMtime ... Signed-off-by: Anna Larch <anna@nextcloud.com>	1 year ago
Anna Larch	35969bfaaa	fix(filesreport): cast fileId to integer ... Signed-off-by: Anna Larch <anna@nextcloud.com>	1 year ago
Ferdinand Thiessen	5fc715a9e2	fix: Adjust unit tests and protect against XSS ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago