2324 Commits (0fac2e3f3aaaeaddf431f7877ebddb6372a00a42)

Author	SHA1	Message	Date
Joas Schilling	21ba3b8737	Only query the appconfig once	10 years ago
Lukas Reschke	f9e90e92d4	Encode HTML tags in JSON ... While not encoding the HTML tags in the JSON response is perfectly fine since we set the proper mimetype as well as disable content sniffing a lot of automated code scanner do report this as security bug. Encoding them leads to less discussions and a lot of saved time.	10 years ago
Morris Jobke	c86cac6a2b	use config.php value instead of version string	10 years ago
Robin Appelman	e9b91b1798	verify the path in the autoloader	10 years ago
Roeland Jago Douma	f12caf930e	Properly return 304 ... The ETag set in the IF_NONE_MODIFIED header is wraped in quotes ("). However the ETag that is set in response is not (yet). Also we need to cast the ETag to a string. * Added unit test	10 years ago
Bjoern Schiessle	37513f9411	don't read certificates if ownCloud is not installed	10 years ago
Bjoern Schiessle	289e9130f3	make system root of key storage configurable	10 years ago
Roeland Jago Douma	ae62537adf	Allow remote avatars	10 years ago
Joas Schilling	bd1215c1dd	Add a test for the interface	10 years ago
Lukas Reschke	ab87274930	Use certificates that expire in 10 years ... 🙊 🙊 🙊	10 years ago
Bjoern Schiessle	e51fe617d8	copy always file by file to encrypt/decrypt it if needed	10 years ago
Bjoern Schiessle	8c08dd0ac2	occ tool to encrypt all files	10 years ago
Lukas Reschke	f3561e2349	Explicitly specify status code 200 as response code ... Potentially fixes https://github.com/owncloud/core/issues/17586	10 years ago
Lukas Reschke	db4cb1dd4d	Expire token after 12h and if user logged-in again ... As an hardening measure we should expire password reset tokens after 12h and if the user has logged-in again successfully after the token was requested.	11 years ago
Lukas Reschke	6a3fb0d3b3	Handle failures gracefully, remove switch	11 years ago
Joas Schilling	36eef2ddab	Add a session wrapper to encrypt the data before storing it on disk	11 years ago
Robin Appelman	24a2fff946	add test mountprovider logic to a trait	11 years ago
Robin Appelman	3dbfbdaf54	allow moving common test logic into traits	11 years ago
Vincent Petry	a2674b2b30	Additions to update page ... Apps to update and to disable will always be shown. Main title changes only when apps need updated, not core. Added bullet style. Exclude incompatible apps from updated apps list.	11 years ago
Joas Schilling	389a32e92a	Add test coverage for Activity Event and Manager	11 years ago
Vincent Petry	b919ae96f0	Display app names in update page for app updates ... Whenever the update page is displayed for apps, show app names instead of the core update text.	11 years ago
Robin McCorkell	3b27603762	Revert "Fix mounting wrapped storages resulting in many-layered wrapping" ... This reverts commit 75a5e6e12b.	11 years ago
Robin McCorkell	c693e5d5d1	Unit tests for occ log:* commands	11 years ago
Robin Appelman	beaef820cf	handle non existing job classes in $jobList->getNext	11 years ago
Joas Schilling	6231bbdde3	Filter the objectstore password from the config list as well	11 years ago
Roeland Jago Douma	65cf4028cc	Move avatarcontroller towards Node Api	11 years ago
Morris Jobke	15da671349	[test] more tests for UserController::setMailAddress ... * fixes #12885	11 years ago
Lukas Reschke	8313a3fcb3	Add mitigation against BREACH ... While BREACH requires the following three factors to be effectively exploitable we should add another mitigation: 1. Application must support HTTP compression 2. Response most reflect user-controlled input 3. Response should contain sensitive data Especially part 2 is with ownCloud not really given since user-input is usually only echoed if a CSRF token has been passed. To reduce the risk even further it is however sensible to encrypt the CSRF token with a shared secret. Since this will change on every request an attack such as BREACH is not feasible anymore against the CSRF token at least.	11 years ago
Robin Appelman	d15870b998	fix setup/teardown	11 years ago
Robin Appelman	b0c8654f9e	split out creating the sabre dav server to it's own factory	11 years ago
Robin Appelman	8c5302847b	add test framework for doing full request webdav tests	11 years ago
Robin McCorkell	2579999373	Add setup check for reverse proxy header configuration	11 years ago
Joas Schilling	e6eb74958f	Remove unnecessary DB prefixes from existing query builder usages	11 years ago
Joas Schilling	5fea6f753e	Automatically prefix table names with *PREFIX* unless specified	11 years ago
Robin Appelman	d979e54030	log a warning while trying to acquire a db lock from within a transaction	11 years ago
sualko	5590d64612	add more unit tests for data: as allowed image domain	11 years ago
Roeland Jago Douma	f0b617b508	Use DI ... * Register OCP\Capability\IManager at DIContainer * Add register capabilities to appframework * Register capabilities in DI way * Make unit test pass again * Remove CapabiltiesManager from OCP	11 years ago
Roeland Jago Douma	7e6a2b71fd	Added Capabilities Manager ... * This should allow the capabilities to be intergrated into the appframework * Unit tests * Throw exception if closure does not return ICapability instance	11 years ago
Vincent Petry	143e4a81f0	Fix removal of share permissions when share disabled for user	11 years ago
sualko	930841b67a	add unit test for data: as allowed image domain	11 years ago
Thomas Müller	db1416346c	Following the spec: ... "`statuscode`: The OCS status code of the response, everything except 100 MUST be handled as failure."	11 years ago
Thomas Müller	6c46430cdb	Return 200 not null - we should return consistent types	11 years ago
Lukas Reschke	4efa7c09b1	Use StringUtils::equals on CSRF token and add unit tests	11 years ago
Bjoern Schiessle	dc5e89e624	also block certificate management in the back-end if external storages are disabled for the user	11 years ago
Thomas Müller	acd9b7576d	Remove pointless unit test	11 years ago
Thomas Müller	3ecf7fce79	Fix unit test within OCSController	11 years ago
Thomas Müller	649cc2fa89	Remove duplicate and unused code	11 years ago
Thomas Müller	bacf1603ff	Adding ocs/v2.php with status code mapper	11 years ago
Robin Appelman	96a9d171b3	Fix db schema	11 years ago
Robin Appelman	4ea7cbb0f5	Add database backend for high level locking	11 years ago