7 Commits (311531ecce497663960877fc536ba94deff27bc0)

Author	SHA1	Message	Date
Joas Schilling	ba87db3fcc	Fix others	10 years ago
Johannes Ernst	66a134e69e	Disallow certain malformed domain names even if they match the trusted domain expression ... Stricter checking for valid domain names	10 years ago
Johannes Ernst	2b4ceae620	Trusted domain wildcard checking made shorter, supporting multiple * ... Added test cases	10 years ago
Johannes Ernst	3516b58be6	Duh, no 'next' in PHP. ... Use === instead of == for extra paranoia.	10 years ago
Johannes Ernst	b1867dc8d1	Allow wildcard * to be used in trusted domains, to support setups where no reliable DNS entry is available (e.g. mDNS) or for simple-to-setup aliasing (e.g. *.example.com)	10 years ago
Lukas Reschke	aba539703c	Update license headers	10 years ago
Roeland Jago Douma	9050e76d95	Move \OC\Security to PSR-4	10 years ago
Lukas Reschke	dc6789fd5b	Explicitly check for port ... The setup uses `\OCP\IRequest::getInsecureServerHost` which in some cases can also include a port. This makes the trusted domain check fail thus. I've decided to add this here that way because adjusting the setup would require parsing the host properly. This is not something that can be done very good in PHP. Check the following example for why `parse_url` is not our friend: https://3v4l.org/k501Z	10 years ago
Thomas Müller	682821c71e	Happy new year!	10 years ago
Lukas Reschke	8289943a0f	Do not trust casting	10 years ago
Lukas Reschke	6ea7410041	Remove legacy check ... This one is not required anymore as we have the RepairConfig repair step since November 2014.	10 years ago
Jenkins for ownCloud	b585d87d9d	Update license headers	11 years ago
Morris Jobke	06aef4e8b1	Revert "Updating license headers" ... This reverts commit 6a1a4880f0.	11 years ago
Jenkins for ownCloud	6a1a4880f0	Updating license headers	11 years ago
Lukas Reschke	9f91d64918	Make scrutinizer happy	11 years ago
Lukas Reschke	886bda5f81	Refactor OC_Request into TrustedDomainHelper and IRequest ... This changeset removes the static class `OC_Request` and moves the functions either into `IRequest` which is accessible via `\OC::$server::->getRequest()` or into a separated `TrustedDomainHelper` class for some helper methods which should not be publicly exposed. This changes only internal methods and nothing on the public API. Some public functions in `util.php` have been deprecated though in favour of the new non-static functions. Unfortunately some part of this code uses things like `__DIR__` and thus is not completely unit-testable. Where tests where possible they ahve been added though. Fixes https://github.com/owncloud/core/issues/13976 which was requested in https://github.com/owncloud/core/pull/13973#issuecomment-73492969	11 years ago