830 Commits (0fac2e3f3aaaeaddf431f7877ebddb6372a00a42)

Author	SHA1	Message	Date
Robin McCorkell	b3acf09c60	Only add valid root for enabled apps	10 years ago
Morris Jobke	038b09b0b0	Proper details about git submodule update ... * fixes #18801	10 years ago
Individual IT Services	cd0a5372ee	reuse existing $systemConfig variable	10 years ago
Robin Appelman	e9b91b1798	verify the path in the autoloader	10 years ago
Morris Jobke	e88b380973	Remove DEBUG constant and use config value ... * introduces config.php option 'debug' that defaults to false * migrate DEBUG constant to config value	11 years ago
Joas Schilling	36eef2ddab	Add a session wrapper to encrypt the data before storing it on disk	11 years ago
Vincent Petry	a2674b2b30	Additions to update page ... Apps to update and to disable will always be shown. Main title changes only when apps need updated, not core. Added bullet style. Exclude incompatible apps from updated apps list.	11 years ago
Vincent Petry	b919ae96f0	Display app names in update page for app updates ... Whenever the update page is displayed for apps, show app names instead of the core update text.	11 years ago
Lukas Reschke	8313a3fcb3	Add mitigation against BREACH ... While BREACH requires the following three factors to be effectively exploitable we should add another mitigation: 1. Application must support HTTP compression 2. Response most reflect user-controlled input 3. Response should contain sensitive data Especially part 2 is with ownCloud not really given since user-input is usually only echoed if a CSRF token has been passed. To reduce the risk even further it is however sensible to encrypt the CSRF token with a shared secret. Since this will change on every request an attack such as BREACH is not feasible anymore against the CSRF token at least.	11 years ago
Arthur Schiwon	ffaf5fed0e	load backbone universally	11 years ago
Thomas Müller	c3cac887f5	- more injection ... - less static calls - use params on sql queries - handle sql exception on database and user creation gracefully	11 years ago
Morris Jobke	5265a44260	Remove commented code	11 years ago
Bjoern Schiessle	058d910f5e	intproduce pre_addToGroup hook. we need to calculate the possible unique ... targets before the user was added to the group otherwise we will always detect a name collision	11 years ago
Roeland Jago Douma	c8145cdbd6	Javascript mimetype icon resolver ... This makes it possible to retrieve the icon for mimetypes in javascript. It makes no additional queries to the server to retrieve the mimetype. * config/mimetypealiases.json added * mimetype.js: this is where the logic resides to convert from mimetype to icon url * mimetypelist.js: generated file with a list of mimetype mapping (aliases) and the list of icon files * ./occ maintenance:mimetypesjs : new command for occ to gernerate mimetypes.js * unit tests updated and still work * javascript tests added * theming support * folder of the theme is now present in javascript (OC.theme.folder)	11 years ago
Thomas Müller	d3ac73c0c9	Remove OC_Log	11 years ago
Vincent Petry	2fe677d0ed	Catch cache garbage collection exception on postLogin ... Just log the exception instead of preventing access to OC.	11 years ago
Morris Jobke	f63915d0c8	update license headers and authors	11 years ago
Hendrik Leppelsack	8621d176db	moved tooltip.js to vendor scripts	11 years ago
Hendrik Leppelsack	f66e9af9a0	replaced tipsy with bootstrap tooltip	11 years ago
Thomas Müller	97a3d8c313	Fix login handler for file cache - fixes #16795	11 years ago
Thomas Müller	5e60795962	Bring back OC\Cache\File - fixes #16760	11 years ago
Robin Appelman	e08423f956	release all locks on shutdown	11 years ago
Georg Ehrke	745c3c64fa	fix preview hooks, enable_previews default is true	11 years ago
Arthur Schiwon	e016ed55ff	also free joblist and base from file cache code	11 years ago
Bjoern Schiessle	0d5c7a11e2	use hooks to update encryption keys instead of the storage wrapper if a file gets renamed/restored, as long as we ... are in the storage wrapper the file cache isn't up-to-date	11 years ago
Hugo Gonzalez Labrador	3e647afbd4	Do not trigger preview hooks if enable_previews is false	11 years ago
Hugo Gonzalez Labrador	3a3a58f248	Do not trigger preview hooks if enable_previews is false	11 years ago
Lukas Reschke	9530e819eb	Don't display errors and log them ... Fixes https://github.com/owncloud/core/issues/16014	11 years ago
Lukas Reschke	8a85d8bc17	Try to set required ini values in base.php ... Fixes https://github.com/owncloud/core/issues/16006	11 years ago
Robin Appelman	d0ad69aa9c	use the preSetup hook to ensure the encryption wrapper is applied correctly	11 years ago
Thomas Müller	d9990c2b4e	Delay initialization of the OC\Encryption\Update - introducing 'OC\Encryption\HookManager'	11 years ago
Bjoern Schiessle	b25c06f576	detect system wide mount points correctly	11 years ago
Thomas Müller	a33edcd2f0	Fix singe user mode on public.php - take two	11 years ago
Jörn Friedrich Dreyer	8964c5068c	do not disclose information, show generic error on login page ... Conflicts: core/templates/login.php lib/base.php	11 years ago
Thomas Müller	f05e19348d	Fix single user check in case no user is logged in	11 years ago
Thomas Müller	f099c9883e	Adding check command to validate server environment - fixes #15429	11 years ago
Thomas Müller	ba9a797eaa	Encryption storage wrapper is enabled by default - necessary to detect encrypted files even if encryption was disabled after files have been encrypted - prevents data corruption	11 years ago
Bjoern Schiessle	e4895bda01	add helper class accessible for encryption modules to ask for a list of users with access to a file, needed to apply the recovery key to all files	11 years ago
Thomas Müller	4db75e3407	Setting up the encryption wrapper in a setup hook - temporarily fixes the wrapping order	11 years ago
Thomas Müller	dbdd754c3f	Further cleanup of files_encryption	11 years ago
Bjoern Schiessle	937efe856d	fix lib/private/encryption/util.php call	11 years ago
Robin Appelman	bac9b54bef	Add mount point to disable the encryption wrapper	11 years ago
Bjoern Schiessle	ff9c85ce60	implement basic encryption functionallity in core to enable multiple encryption modules	11 years ago
Lukas Reschke	73af302d39	Remove custom `arg_separator.output` ... This seems unrequired nowadays and like a legacy fragment. It should be safe to remove. Fixes https://github.com/owncloud/core/issues/14782	11 years ago
Jenkins for ownCloud	b585d87d9d	Update license headers	11 years ago
Thomas Müller	843fef0490	Handle session initialization errors and display error page - fixes #15053	11 years ago
Joas Schilling	0bed187613	Stop executing, when 3rdparty is missing or apps directory is invalid	11 years ago
Thomas Müller	6c1a1234f8	Properly handle available databases at runtime and respect setup checks in command line as well	11 years ago
Thomas Müller	7181840665	Use occ to install ownCloud in autotest.sh	11 years ago
Robin McCorkell	0e4933e6d2	Refactor \OC\Memcache\Factory ... Caches divided up into two groups: distributed and local. 'Low latency' is an alias for local caches, while the standard `create()` call tries to get distributed caches first, then local caches. Memcache backend is set in `config.php`, with the keys `memcache.local` and `memcache.distributed`. If not set, `memcache.distributed` defaults to the value of `memcache.local`.	11 years ago