nextcloud-server

Commit Graph

Author	SHA1	Message	Date
Lukas Reschke	0e2aee2be6	Replace with exception instead of boolean return value Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	10 years ago
Lukas Reschke	01c566883e	%d instead %s These are only numbers. THX @nickvergessen Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	10 years ago
Lukas Reschke	89fc4358ba	Use substr and explode instead of a regex Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	10 years ago
Lukas Reschke	067fb18670	Read array elements instead of substr Otherwise this would break with 11.0.0 Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	10 years ago
Lukas Reschke	ca7f6dec55	Make non-static Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	10 years ago
Lukas Reschke	32cf661215	Use new appstore API This change introduces the new appstore API in Nextcloud. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	10 years ago
Robin Appelman	3692769b0a	Add getShareTypesInFolder to optimize folder listening Signed-off-by: Robin Appelman <icewind@owncloud.com>	10 years ago
Hemanth Kumar Veeranki	2b7d63f565	Added Exception catch in case of DB User exists Signed-off-by: Hemanth Kumar Veeranki <hemanthveeranki@gmail.com>	10 years ago
Joas Schilling	54c0501ffa	Type hints already make sure it is an array Signed-off-by: Joas Schilling <coding@schilljs.com>	10 years ago
Joas Schilling	2c0b5dee19	Allow rich object strings in messages as well Signed-off-by: Joas Schilling <coding@schilljs.com>	10 years ago
Nextcloud bot	6d2d069c17	[tx-robot] updated from transifex	10 years ago
Nextcloud bot	1187a8c183	[tx-robot] updated from transifex	10 years ago
Roeland Jago Douma	e55e6f1f14	Cleanup usages Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	10 years ago
Roeland Jago Douma	d5159423cd	Removed depreacted functions (since 6.0) Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	10 years ago
Nextcloud bot	035890aeb1	[tx-robot] updated from transifex	10 years ago
Roeland Jago Douma	94d09141f8	Remove legacy l10n Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	10 years ago
Roeland Jago Douma	83e7cfd13a	Fix more tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	10 years ago
Roeland Jago Douma	740659a04c	Move away from OC_L10N Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	10 years ago
Roeland Jago Douma	f722640a32	Proper DI of config * Fixed comments Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	10 years ago
Morris Jobke	e7ec4601a3	Use callForSeenUsers for avatar migration Signed-off-by: Morris Jobke <hey@morrisjobke.de>	10 years ago
Jörn Friedrich Dreyer	f8352fcb8d	introduce callForSeenUsers and countSeenUsers (#26361 ) * introduce callForSeenUsers and countSeenUsers * add tests * oracle should support not null on clob * since 9.2.0	10 years ago
Nextcloud bot	ad597d498d	[tx-robot] updated from transifex	10 years ago
Nextcloud bot	9984eba727	[tx-robot] updated from transifex	10 years ago
Roeland Jago Douma	b05fe45d52	Fix avatar on exif rotated images Fixes #1928 Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	10 years ago
Roeland Jago Douma	b7046d390f	Remove internal share mail function Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	10 years ago
Joas Schilling	c20ab0049f	Identify Chromium as Chrome Signed-off-by: Joas Schilling <coding@schilljs.com>	10 years ago
Lukas Reschke	fdcb8edd78	Add nonce also to legacy CSP Pages that do not use the AppFramework have its CSP inherited from `\OC_Response::addSecurityHeaders`. While those are not many anymore, there are some examples such as the "Help" page. To stay completely backwards-compatible we should also add the nonce to the legacy CSP response. To test that open your browser console and open the help page. Without this you will get a JS error. With this you won't. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	10 years ago
Nextcloud bot	a973c1bfb9	[tx-robot] updated from transifex	10 years ago
Lukas Reschke	015affb082	Missing returns + autoloader file Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	10 years ago
Roeland Jago Douma	6dbe417c51	Inlince oc.js if possible! Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	10 years ago
Roeland Jago Douma	e351ba56f1	Move browserSupportsCspV3 to CSPNonceManager Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	10 years ago
Roeland Jago Douma	d5589a15d5	Move oc.js to a proper class Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	10 years ago
Thomas Müller	748f18f34e	Remove all unneeded set_include_path()	10 years ago
Lukas Reschke	62bb991050	Add check for linux os Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	10 years ago
Lukas Reschke	459477e2c3	Move function to LargeFileHelper Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	10 years ago
Boris Rybalkin	cfc0d9249b	fixing php 32 bit (arm) filemtime on large file issue (#18971 ) (#25428 ) * fixing php 32 bit (arm) filemtime on large file issue (#18971) * cast to int	10 years ago
Lukas Reschke	df3444493b	Remove not existent function call - Removes a not existent function call - Removes a fallback for Windows Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	10 years ago
Nextcloud bot	e23a298a81	[tx-robot] updated from transifex	10 years ago
Vincent Petry	6d1e858aa4	Fix logClientIn for non-existing users (#26292 ) The check for two factor enforcement would return true for non-existing users. This fix makes it return false in order to be able to perform the regular login which will then fail and return false. This prevents throwing PasswordLoginForbidden for non-existing users.	10 years ago
Morris Jobke	ee8b8adf7a	Update autoload files 🙈 Signed-off-by: Morris Jobke <hey@morrisjobke.de>	10 years ago
Roeland Jago Douma	e73a11d106	Fix permision mask If we move a file from the temp part file to the original file we don't need update permissions. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	10 years ago
Morris Jobke	ced3aeacb1	dump autoloader Signed-off-by: Morris Jobke <hey@morrisjobke.de>	10 years ago
Morris Jobke	f920153f16	Throw exception because the logger causes session issues anyway that early in the request cycle Signed-off-by: Morris Jobke <hey@morrisjobke.de>	10 years ago
Jörn Friedrich Dreyer	2e0e68b57f	log error when setting timezone to UTC fails (#26354 ) Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	10 years ago
Jörn Friedrich Dreyer	817729dc3f	add upgrade command before repair, handle NeedsUpgradeExcaption better	10 years ago
Lukas Reschke	38b3ac8213	Add ContentSecurityPolicyNonceManager Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	10 years ago
RealRancor	14b1d946a8	Remove checks whether OC is running on Windows pt. 2	10 years ago
Thomas Müller	03ec052b4e	App dependencies are now analysed on app enable as well - not only on app install.	10 years ago
Vincent Petry	44cf67accd	Storage 503 message improvements "Storage not available" is now "Storage temporarily not available". Exceptions are now logged in DEBUG level, not FATAL.	10 years ago
Lukas Reschke	9e6634814e	Add support for CSP nonces CSP nonces are a feature available with CSP v2. Basically instead of saying "JS resources from the same domain are ok to be served" we now say "Ressources from everywhere are allowed as long as they add a `nonce` attribute to the script tag with the right nonce. At the moment the nonce is basically just a `<?php p(base64_encode($_['requesttoken'])) ?>`, we have to decode the requesttoken since `:` is not an allowed value in the nonce. So if somebody does on their own include JS files (instead of using the `addScript` public API, they now must also include that attribute.) IE does currently not implement CSP v2, thus there is a whitelist included that delivers the new CSP v2 policy to newer browsers. Check http://caniuse.com/#feat=contentsecuritypolicy2 for the current browser support list. An alternative approach would be to just add `'unsafe-inline'` as well as `'unsafe-inline'` is ignored by CSPv2 when a nonce is set. But this would make this security feature unusable at all in IE. Not worth it at the moment IMO. Implementing this offers the following advantages: 1. Security: As we host resources from the same domain by design we don't have to worry about 'self' anymore being in the whitelist 2. Performance: We can move oc.js again to inline JS. This makes the loading way quicker as we don't have to load on every load of a new web page a blocking dynamically non-cached JavaScript file. If you want to toy with CSP see also https://csp-evaluator.withgoogle.com/ Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	10 years ago

1 2 3 4 5 ...

12820 Commits (311531ecce497663960877fc536ba94deff27bc0)