4119 Commits (4100b151cc0a4e131a3eab3fbb7cd2b604f475e6)

Author	SHA1	Message	Date
Joas Schilling	38a164aa7a	Make sure the array exists	10 years ago
Robin Appelman	8123df9489	setup owner when getting users for share	10 years ago
Joas Schilling	21ba3b8737	Only query the appconfig once	10 years ago
Lukas Reschke	f9e90e92d4	Encode HTML tags in JSON ... While not encoding the HTML tags in the JSON response is perfectly fine since we set the proper mimetype as well as disable content sniffing a lot of automated code scanner do report this as security bug. Encoding them leads to less discussions and a lot of saved time.	10 years ago
Joas Schilling	8f2110e5da	Revert "Soft fail when deleting and no entry found"	10 years ago
Robin Appelman	4880d7729b	enable transational locking by default	10 years ago
Robin McCorkell	c9c246a3f5	Soft fail when deleting and no entry found	10 years ago
Robin Appelman	0f6df2e0b6	Allow creating previewss that cover the specified dimensions	10 years ago
Robin McCorkell	5b2529b448	Delay adding OCS prefix to route collection until all is loaded ... ->addPrefix() iterates over all registered routes, so must be run after all apps have had a chance to load their OCS routes.	10 years ago
Roeland Jago Douma	f12caf930e	Properly return 304 ... The ETag set in the IF_NONE_MODIFIED header is wraped in quotes ("). However the ETag that is set in response is not (yet). Also we need to cast the ETag to a string. * Added unit test	10 years ago
Robin McCorkell	e60c4bada1	Decode request content only on getContent	10 years ago
Bjoern Schiessle	37513f9411	don't read certificates if ownCloud is not installed	10 years ago
Bjoern Schiessle	289e9130f3	make system root of key storage configurable	10 years ago
Roeland Jago Douma	2aff11c80b	Actually validate the expire date on share ... * Added more intergration tests	11 years ago
Robin Appelman	4cb8ca1860	Check result of storage wrappers	11 years ago
Joas Schilling	42f0651b83	Sticky the notification types of files and sharing	11 years ago
Joas Schilling	a12d354762	Deprecate OC_L10N::get()	11 years ago
Joas Schilling	c3c7689b67	Add a public interface for the language factory so apps can use it	11 years ago
Bjoern Schiessle	e51fe617d8	copy always file by file to encrypt/decrypt it if needed	11 years ago
Lukas Reschke	3d2ee95f1e	Remove last occurence of `forcessl` ... This shoudl have been adjusted as well, now it's consistent with `setMagicInCookie`. While it does not have a security impact directly some automated scanners reported this all the time.	11 years ago
Lukas Reschke	f3561e2349	Explicitly specify status code 200 as response code ... Potentially fixes https://github.com/owncloud/core/issues/17586	11 years ago
Morris Jobke	4f13f96981	Save detected l10n of browser on login ... * fixes owncloud/activity#373	11 years ago
Thomas Müller	6f6a5f6c29	Adding path to log message	11 years ago
Vincent Petry	fe575feca8	Prevent scanner going crazy with unavailable storages	11 years ago
Morris Jobke	e88b380973	Remove DEBUG constant and use config value ... * introduces config.php option 'debug' that defaults to false * migrate DEBUG constant to config value	11 years ago
Lukas Reschke	bd13126a80	Fix master again ... Caused due to merge of two PRs	11 years ago
Joas Schilling	4e0e2eb222	Change log level of debugging logs to debug	11 years ago
Lukas Reschke	0a1d551090	Use IClientService to check for remote ownCloud instances ... 1. Allows to set a timeout (though still not perfect but way better than before) 2. Allows to have unit tests 3. I also added unit tests for the existing controller code 4. Corrected PHPDoc on IClient	11 years ago
Lukas Reschke	6a3fb0d3b3	Handle failures gracefully, remove switch	11 years ago
Joas Schilling	36eef2ddab	Add a session wrapper to encrypt the data before storing it on disk	11 years ago
Joas Schilling	c58316b1ae	Expand the doc blocks on the new methods	11 years ago
Joas Schilling	6697844c01	Remove unnecessary code	11 years ago
Vincent Petry	a2674b2b30	Additions to update page ... Apps to update and to disable will always be shown. Main title changes only when apps need updated, not core. Added bullet style. Exclude incompatible apps from updated apps list.	11 years ago
Joas Schilling	389a32e92a	Add test coverage for Activity Event and Manager	11 years ago
Morris Jobke	29decf698c	[app management] fix dependency check on install	11 years ago
Vincent Petry	b919ae96f0	Display app names in update page for app updates ... Whenever the update page is displayed for apps, show app names instead of the core update text.	11 years ago
Joas Schilling	4314c8fc6f	Use an IEvent object instead of a huge parameter list	11 years ago
Joas Schilling	bc2aa14849	Extend the interfaces IManager and IConsumer to allow passing in the object	11 years ago
Robin McCorkell	3b27603762	Revert "Fix mounting wrapped storages resulting in many-layered wrapping" ... This reverts commit 75a5e6e12b.	11 years ago
Robin McCorkell	3bb793b6a7	Implement password authentication mechanisms ... Introduces the basic password authentication mechanism, along with a mechanism based on ownCloud credentials stored in the user session. Change to lib/private is an extension of PermissionsMask, as isSharable() override was missing. Session credentials auth mechanism now disables sharing on applied storages, as credentials will not be available.	11 years ago
Lukas Reschke	40b87b1394	Add warning for not existing CA bundle when updating ... For newer releases we shall use an integrity check. But that's a good alternative for now.	11 years ago
Morris Jobke	8fbb0c7b49	Fix format of log/private/ocs.php ... Fixes https://github.com/owncloud/core/pull/14314#discussion_r37305256	11 years ago
Robin Appelman	beaef820cf	handle non existing job classes in $jobList->getNext	11 years ago
Robin McCorkell	1c26755686	Only load app routes if the app has already been loaded	11 years ago
Morris Jobke	24e20a51eb	Degrade log message about missing app in appstore to debug ... * fixes #18154	11 years ago
Thomas Müller	0b64268910	Adding EventDispatcher to IServerContainer	11 years ago
Lukas Reschke	a7e4785be9	Cleanup OCS code ... This removes unused code from `OC_OCS` which nobody understood what it really was for anyways.	11 years ago
Lukas Reschke	8313a3fcb3	Add mitigation against BREACH ... While BREACH requires the following three factors to be effectively exploitable we should add another mitigation: 1. Application must support HTTP compression 2. Response most reflect user-controlled input 3. Response should contain sensitive data Especially part 2 is with ownCloud not really given since user-input is usually only echoed if a CSRF token has been passed. To reduce the risk even further it is however sensible to encrypt the CSRF token with a shared secret. Since this will change on every request an attack such as BREACH is not feasible anymore against the CSRF token at least.	11 years ago
Thomas Müller	1d219cf799	With V2 we should ensure that the status codes are kept in sync	11 years ago
Robin Appelman	b7cbff23d9	handle single file dav endpoints	11 years ago