1145 Commits (2ea7719bfa4280220c7dfc9fbfec97b61ba33112)

Author	SHA1	Message	Date
Joas Schilling	2014e7b836	fix(apps): Fix loading info.xml file ... Ref: https://bugs.php.net/bug.php?id=62577 Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
Simon L	918859cafd	allow to specify upgrade.cli-upgrade-link in order to link to the correct documentation ... Signed-off-by: Simon L <szaimen@e.mail.de>	3 years ago
Simon L	d293293cda	Fixed bug which 'overwritewebroot' does not work with 'overwritecondaddr'. ... Signed-off-by: Takahiro Nagai <78393959+takahiro-blab@users.noreply.github.com> Signed-off-by: Simon L <szaimen@e.mail.de>	3 years ago
Simon L	84b88c01c7	adjust wording ... Signed-off-by: Simon L <szaimen@e.mail.de>	3 years ago
Simon L	6e5a307757	adjust wording for update hint when files of a specific app are not there ... Signed-off-by: Simon L <szaimen@e.mail.de>	3 years ago
Arthur Schiwon	bb4b34ff69	Read mtime of version.php only once ... - in most cases it would read again in \OC_Util::loadVersion anyway - remove some unused use statements Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	3 years ago
Arthur Schiwon	7519949f37	add the server roots and version info hash to apcu prefix ... fixes collissions when more than one instance is running on the same system For the memcaches we use a more complex prefix, where version and instance ID are incorporated. We do not have this data at hand at this point of time. But we can get the mtime of the version.php file relatively cheap. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	3 years ago
Christoph Wurst	a06898a2d0	fix(security)!: Use consistent HTTP status for strict cookie checks ... Before: 503/412 Now: 412 + json body explaining the error Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Maxence Lange	fc29b0d1b7	app type extended_authentication ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	3 years ago
Côme Chilliet	426c0341ff	Use typed version of IConfig::getSystemValue as much as possible ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Joas Schilling	705165d3d1	fix(session): Fix DAVx5 sync problems by partial reverting session changes ... Temporary disabled the short cut again to solve issues with CalDAV/CardDAV clients like DAVx5 that use cookies and need a session. See https://github.com/nextcloud/server/issues/37277#issuecomment-1476366147 and the other comments for further information. Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Christoph Wurst	0e6fccf9e1	fix(security): Log failing strict cookie check ... The error is silent otherwise and makes it very hard to debug on a production system. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Julius Härtl	bbc6eee803	fix: Avoid log spam on 404 routes not using GET ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Joas Schilling	98ed72b3ed	Revert "fix(performance): Do not set up filesystem on every call"	3 years ago
Anna Larch	5d4efb4d5f	Do not set up filesystem on every call ... Also remove old Oc_FileChunking logis that produced GC- collectable chunks Signed-off-by: Anna Larch <anna@nextcloud.com>	3 years ago
Julien Veyssier	6431c5a559	extend the reference API for the new link picker ... - add 2 interfaces for discoverable and searchable reference providers - new OCS route to get info on discoverable/searchable reference providers - new abstract ADiscoverableReferenceProvider that only implements jsonSerialize - listen to RenderReferenceEvent to inject provider list with initial state Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	3 years ago
Julius Härtl	842f4d530f	fix(session): Always setup the session if a session cookie is passed ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Julius Härtl	6abb37317f	Do not setup a session when not required on WebDAV requests ... If basic auth is used on WebDAV endpoints, we will not setup a session by default but instead set a test cookie. Clients which handle session cookies properly will send back the cookie then on the second request and a session will be initialized which can be resued for authentication. Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Côme Chilliet	a529aa79d8	Strong type singletons from lib/base.php ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	e1d324f7eb	Migrate lib/base.php to LoggerInterface ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	26d75add8f	Put back cast to string now that timelimit is an int ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	7372da6c6d	Fixing more psalm errors from lib/base.php ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	444811b0fe	Use Server::get some more ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	cf508c1e47	Use strict typing in base.php ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Julius Härtl	be4c061b75	Set apcu prefix for composer ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Christoph Wurst	052dcdebe8	Refactor the ErrorHandler into a dynamic class ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Julius Härtl	11bedf1c3b	Use proper error pages instead of always redirecting ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Arthur Schiwon	9b7ef2962e	remove listeners to OC_Filesystem::(write|rename) old style hooks ... - the events are not emitted anymore - OC_Filesystem::isBlacklisted() is not called from anywhere else Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	3 years ago
Julius Härtl	80f6a5834a	Refactor cache handling ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Andy Xheli	12c8123873	Makes untrusted domain error on info ... Signed-off-by: Andy Xheli <axheli@axtsolutions.com> Since e6d9ef2e38 was applied logs get filled up with Trusted domain error. "X.X.X.X tried to access using "X.X.X.X" as host alot of users missed important errors do toe6d9ef2e38 please see https://github.com/nextcloud/server/issues/32599 This should fix. https://github.com/nextcloud/server/issues/32599#event-7281164903 Signed-off-by: Andy Xheli <axheli@axtsolutions.com>	3 years ago
Julius Härtl	1b43fbe06c	Move setting of gc_maxlifetime to initSession ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Julius Härtl	9e1d431255	Add config option to disable strict session timeout to be able to use read_and_close ... Fixed https://github.com/nextcloud/server/issues/29356 Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Julius Härtl	9b4b72826a	Reopen sessions if we need to write to them instead of keeping them open ... Sessions are a locking operation until we write close them, so close them early and reopen later in case we want to write to them Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Christoph Wurst	0ed987a8dd	Set special header for 503 maintenance mode ... This removes ambiguity with a 503 returned by app code, web server or similar. Front-end and clients can then handle this state accordingly. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Christoph Wurst	a1149b0378	Do not redirect if requested CSS can not be found ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Christoph Wurst	222a9523b5	Fix 404 handling of requested JSON/XML ... If front-end or an application requests JSON/XML, there is no point in redirecting to the default page if that response doesn't exist. In the worst case that would just cause another request, therefore server load, traffic and a response that is meaningless to the requester. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	4 years ago
Joas Schilling	a6ca9d592d	Revert "Remove call to already default php.ini values"	4 years ago
Robin Appelman	a67bf03ac0	reorder startup events to fix overlapping ... current the `request` and `runtime` events overlap with the `init` event which makes it hard to create usefull visualizations. this reorders things a bit to remove an overlap Signed-off-by: Robin Appelman <robin@icewind.nl>	4 years ago
Micke Nordin	0ace1831f4	Fix suggestions by @artonage ... Signed-off-by: Micke Nordin <kano@sunet.se>	4 years ago
Julius Härtl	d3acf8203d	Properly import maintenance script ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	4 years ago
Julius Härtl	9a6869943e	Introduce event for loading additional script on projects ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	4 years ago
Git'Fellow	f110ff9f4d	Remove default values ... These values are already the default on supported PHP versions. I suggest to remove these calls.	4 years ago
Mikael Nordin	30fe91a77f	Simpler version as proposed by @artonage ... Co-authored-by: Louis <6653109+artonge@users.noreply.github.com> Signed-off-by: Micke Nordin <kano@sunet.se>	4 years ago
Micke Nordin	259664468a	Respect user settings in php.ini if they are big enough ... In the admin guide: * https://docs.nextcloud.com/server/latest/admin_manual/configuration_files/big_file_upload_configuration.html it is mentioned that you can tweek: * max_input_time * max_execution_time in order to enable larger file uploads. However, the current codebase will hard code these values to one hour, no matter what the user sets in php.ini. This patch will allow the user to set these settings in php.ini and they will be respected, if and only if, they are set to something bigger than 3600 seconds. Signed-off-by: Micke Nordin <kano@sunet.se>	4 years ago
Carl Schwan	7d272c54d0	Add a built-in profiler inside Nextcloud ... The webui is provided by a seperate application named profiler Signed-off-by: Carl Schwan <carl@carlschwan.eu>	4 years ago
Julius Härtl	eede608c0e	Add event logging to app loading ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	4 years ago
Côme Chilliet	63d7e7c798	Build OC\Core\Application when running occ or cron to register listeners correctly ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Joas Schilling	07a9f34385	Extract request id handling to dedicated class so it can be injected manually ... Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
Pierre Ozoux	e6d9ef2e38	Makes untrusted domain error a warning. ... It sends a 400 to the client, so I could even argue that it should be an error. But currently as an admin, I'm quiet surprised that I get a 400 in the UI, and nothing in the log with the default level. I saw this commit that explains the reason why info. But I disagree. Feel free to close the PR if you don't agree with it. Signed-off-by: Pierre Ozoux <pierre@ozoux.net>	4 years ago
Louis Chemineau	b46ff973e0	Use less deprecated methods in base.php ... Signed-off-by: Louis Chemineau <louis@chmn.me>	4 years ago