5332 Commits (2ad33bc06ec0d4eaa9db287f06c4b204718fba4e)

Author	SHA1	Message	Date
Tim Terhorst	2ad33bc06e	Add Fatal logging option ... Signed-off-by: Tim Terhorst <mynamewastaken+gitlab@gmail.com>	6 years ago
Christoph Wurst	de6940352a	Move settings to an app ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at> Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>	6 years ago
John Molakvoæ (skjnldsv)	f737dc9a86	Remove input id on login form ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com> Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>	6 years ago
Robin Appelman	35f317df7b	handle moveFromStorage within the same storage even when storage wrappers are applied to the source storage ... the target storage doesn't need additional handling for wrappers as the wrappers implementation of moveFromStorage already deals with that Any storage based on local storage isn't affected by this as local storage already has it's own way of handling with this Signed-off-by: Robin Appelman <robin@icewind.nl>	6 years ago
Robin Appelman	733d4b6cca	dont delete cache entries if deleting an object from object store failed ... Signed-off-by: Robin Appelman <robin@icewind.nl>	6 years ago
Roeland Jago Douma	210a0554a2	Use the actual password to update the tokens ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Greta Doci	68ef242a0a	Fixed the SecurityTest error ... Signed-off-by: Greta Doci <gretadoci@gmail.com> Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>	6 years ago
Greta Doci	4ff7551574	Fixed the test ... Signed-off-by: Greta Doci <gretadoci@gmail.com>	6 years ago
Roeland Jago Douma	2b98eea129	Harden identifyproof openssl code ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Christoph Wurst	a1ef939c06	Use Symfony's new contract Event class instead of the deprecated one ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Roeland Jago Douma	41cbb05aea	Split personal security settings in code ... Instead of one big monolitic sections this is the first step in breaking down the settings. This should make is easiet to see what does what. As well as nicely splitting up the sections. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Arthur Schiwon	1cc6f34d88	adapt file hooks test to eventdispatcher utilization ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	6 years ago
Robin Appelman	8ef5a366ec	add MAX and MIN to functionbuilder ... Signed-off-by: Robin Appelman <robin@icewind.nl>	6 years ago
Roeland Jago Douma	0ff08810d9	Log/FileTest does not require the DB ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Arthur Schiwon	d33e0be2f1	adjust test expectations ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	6 years ago
Daniel Kesselberg	773778dd8c	Add default timeout to expected request options ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	6 years ago
Greta Doci	1993984769	Adjust acceptance tests to changes in link share menu behaviour ... Now the link share menu is not automatically opened after a link share is created, so waiting until it was opened failed in iShareTheLinkFor. Note that the steps that interact with the link share menu take care themselves of showing the menu if needed, so there is no need to explicitly show it despite the change. Also, the waiting in iShareTheLinkFor was introduced when the link share menu was changed to automatically open after creating a link share, as that caused some issues with the steps that opened the menu by themselves (fec8d12fc5). Due to all this, now that the link share menu is again not automatically opened the wait can be simply removed. Signed-off-by: Greta Doci <gretadoci@gmail.com>	6 years ago
Roeland Jago Douma	3f12ec95f0	SessionMiddleware: declare session property ... * Remove request since we don't useit * Update tests as well Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Joas Schilling	23a0cbe6ef	Only run integration tests when PHP was modified ... Signed-off-by: Joas Schilling <coding@schilljs.com>	6 years ago
Julius Härtl	52dc36fb88	Mock client URL in new user mail tests ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	6 years ago
Arthur Schiwon	4bd83c9a28	adjust tests ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	6 years ago
Joas Schilling	db968cb1d4	Cleanup the Settings class ... Signed-off-by: Joas Schilling <coding@schilljs.com>	6 years ago
Roeland Jago Douma	7927aebdeb	Fix report of phpstan in Limiter ... * unneeded arguments to constructor * added return types * let automatic DI do its work Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Daniel Kesselberg	9c4c5ee818	Add test case for existing user with token null ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	6 years ago
Daniel Kesselberg	7f7c6e49b6	Return the disabled user mock instead of the existing ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	6 years ago
Daniel Calviño Sánchez	e5a305b9d8	Allow Context subclasses in acceptance tests to access parent actor ... Although uncommon, in some cases a Context may need to be extended (for example, to override a step defined in the server with a specific behaviour in the acceptance tests of an app); in those cases the subclass should be able to access the actor attribute defined in the Context it is extending. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>	6 years ago
Scott Shambarger	edf946dfc7	Correctly handle emtpy string in proxyuserpwd config ... As documented, the default value for config value proxyuserpwd is ''. However, that value results in the error: "cURL error 5: Unsupported proxy syntax in '@'". This patch handles the values of '' and null (the default in the code) the same for config values proxyuserpwd and proxy. Signed-off-by: Scott Shambarger <devel@shambarger.net>	6 years ago
Roeland Jago Douma	6dc179ee12	Fix login flow form actions ... So fun fact. Chrome considers a redirect after submitting a form part of the form actions. Since we redirect to a new protocol (nc://login/). Causing the form submission to work but the redirect failing hard. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Roeland Jago Douma	f81817b47d	Add tests ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Roeland Jago Douma	b8c5008acf	Add feature policy header ... This adds the events and the classes to modify the feature policy. It also adds a default restricted feature policy. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Roeland Jago Douma	cf647451e5	Update CSP test cases to handle the new form-action ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Julius Härtl	22b81ac1e4	Fix permission check on incoming federated shares ... Since federated shares have their permissions set on the node, we do not need to check for parent share permissions. Otherwise reshares of incoming federated have no permission variable defined and creating them will fail Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Julius Härtl	3b0d13944a	Move actual password reset to vue ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Roeland Jago Douma	0ea7fbae54	Update tests ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Morris Jobke	98237d2a00	Remove unused OC\Share\Share::checkPasswordProtectedShare ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Roeland Jago Douma	b6dd2ebd39	Use proper exception in lostController ... There is no need to log the expcetion of most of the stuff here. We should properly log them but an exception is excessive. This moves it to a proper exception which we can catch and then log. The other exceptions will still be fully logged. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	37a4282c7a	Split up security middleware ... With upcoming work for the feature policy header. Splitting this in smaller classes that just do 1 thing makes sense. I rather have a few small classes that are tiny and do 1 thing right (and we all understand what is going on) than have big ones. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Arthur Schiwon	78201bcb72	treat sensitive config keys by pattern ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Roeland Jago Douma	0487144b26	Remove deprecated searchByTag ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Arthur Schiwon	898430b6b1	supresses disclosing the userid for LDAP users in the welcome mail ... The userid is not relevant here, and by default cannot be used to login with. Typically, there is a common type of login names in organizations (LDAP username or email most often) that does not need to be disclosed. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Julius Härtl	3674f6fa2d	Check the if we can actually access the storage cache for recent files ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Daniel Kesselberg	8bed3021bd	Exclude .rnd files from integrity check ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Sam Bull	ea935f65fd	Add support for CSP_NONCE server variable ... Allow passing a nonce from the web server, allowing the possibility to enforce a strict CSP from the web server. Signed-off-by: Sam Bull <git@sambull.org> Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Morris Jobke	99f2c82222	Properly inject the logger ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Joas Schilling	565838da9c	Update unit tests ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Joas Schilling	55f5bc79a1	Keep the old method as a fallback and adjust the tests ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Roeland Jago Douma	f8aeef7ae9	Lock SCSS so we only run 1 job at a time ... This is bit hacky but a start to lock the SCSS compiler properly Retry during 10s then give up Properly get error message Do not clear locks and properly debug scss caching Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Joas Schilling	092d34d9df	Add a unit test for guests as well ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Daniel Kesselberg	d57540ac84	Return first value from $users ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Daniel Kesselberg	6235a66aac	Don't send executionContexts for Clear-Site-Data ... There are plans to remove executionContexts from the spec: https://github.com/w3c/webappsec-clear-site-data/issues/59 Firefox already removed it https://bugzilla.mozilla.org/show_bug.cgi?id=1548034 Chromium implementation is not finish: https://bugs.chromium.org/p/chromium/issues/detail?id=898503&q=clear-site-data&sort=-modified&colspec=ID%20Pri%20M%20Stars%20ReleaseBlock%20Component%20Status%20Owner%20Summary%20OS%20Modified Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago