393 Commits (5cd1880daa048a685da689c7f41a2e50486494de)

Author	SHA1	Message	Date
Vincent Petry	e378a757ff	Add system tags filter section for files app	10 years ago
Vincent Petry	23f0515771	Fix JS DAV files client unit tests ... Instead of trying to mock the promise, just stub davclient.js' request object.	10 years ago
Vincent Petry	22be3867f1	Allow creating tags where another one with same prefix exists ... When creating a new entry, compare the full tag name and not only the prefix.	10 years ago
Vincent Chan	faf48e42b7	Move data protection check to javascript ... fixes #20199	10 years ago
Vincent Petry	df3f6fee10	Properly forward error messages in share dialog	10 years ago
Vincent Petry	7e1de0e3c2	Fix share default expiration date calculation ... Now using UTC dates with moment js to accurately add the number of days	10 years ago
Vincent Petry	b063ddb05b	Share dialog use OCS API	10 years ago
Vincent Petry	1473e156f4	Use boxes for system tags, shorten permission text ... Permission text now doesn't appear when all permissions are there, or shows as "invisible" or "not assignable", which should better cover all use cases. Changed select2 style to use boxes in the input field.	10 years ago
Vincent Petry	714d8c2424	Fix system tags conflict situations ... Does not disrupt the UX whenever a tag or association was created concurrently. The input field will adjust itself as if the tag was already there in the first place.	10 years ago
Vincent Petry	cfba90a78d	Fix system tags proppatch with booleans ... Backbone webdav adapter now converts booleans and ints to strings. Fixed system tags to use "true" / "false" strings for booleans instead of 1 / 0.	10 years ago
Vincent Petry	0a1350d5ac	System tags sidebar selector now respects permissions ... For admins: display the namespace behind the tag name. For users: no namespace, don't display non-assignable tags in the dropdown, display already assigned non-assignable tags with a different style	10 years ago
Joas Schilling	f108dbfa6a	Move getDescriptiveTag to core	10 years ago
Vincent Petry	ffba6d0a7e	Added system tags GUI in sidebar ... Added files details sidebar panel to assign/unassign/rename/delete system tags.	10 years ago
Morris Jobke	6e096936e5	update JS humanFileSize to use KB instead of kB	10 years ago
Vincent Petry	857c316bda	Backbone transport for Webdav	10 years ago
Lukas Reschke	4d0dcd3c53	Add X-Download-Options and X-Permitted-Cross-Domain-Policies ... Two small security hardenings for our IE users and those with Adobe products. Aligns it more with https://github.com/twitter/secureheaders#secureheaders---	10 years ago
Morris Jobke	8b6b042ffd	Add config switch to disable the .well-known URL check	10 years ago
Morris Jobke	a6c7cdd75e	Show the well-known URL check as info instead of error ... * ref https://github.com/owncloud/core/pull/21562#issuecomment-170344549	10 years ago
Morris Jobke	0161928fc3	Add check for .well-known URL in the root of the webservers URL ... * fixes #20012	10 years ago
Joas Schilling	334a6d57a3	Check the correct config for displaying the "notify by email" option	10 years ago
Roeland Jago Douma	6bd15856b2	Added js tests for the Sharee API usage	10 years ago
Roeland Jago Douma	49031e0744	Fix unit tests	10 years ago
Lukas Reschke	cebeb0e052	Fix unit tests ... Fixes https://github.com/owncloud/core/issues/21345	10 years ago
Vincent Petry	181ba7b4e1	Fix files UI mtime parsing from webdav	10 years ago
Vincent Petry	6735005be0	Fix duplicate bogus share field when link sharing is not allowed ... Whenever link share is not allowed, it was outputting a bogus sharing field which name would conflict with the regular sharing field. This fix makes sure that the bogus sharing field with "Resharing not allowed" message only appears when triggered by removed share permissions.	10 years ago
Lukas Reschke	4971015544	Add code integrity check ... This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release 😉). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF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\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates **Note:** The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following:  As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.	10 years ago
Vincent Petry	a1d0682ef8	Use oc:fileid property instead of oc:id	10 years ago
Thomas Müller	ab1d786d87	Fix port issue - options.host already has the port attached	10 years ago
Vincent Petry	f120846e29	Added OC.Files.Client Webdav-based files client	10 years ago
Joas Schilling	f04151f69b	Close the user menu when clicking it again	10 years ago
Vincent Petry	9c9158e6b7	Fix icon update to be more consistent ... Makes the details bar show the same icon as in the list.	10 years ago
Tom Needham	628e4a9daf	Add sharee list view js tests	10 years ago
Phil Davis	89ab505c7b	sharedialogviewSpec.js couple of text typos ... I noticed a new typo in 15ef39d5b9 and looked for others while I am here.	10 years ago
Vincent Petry	c64fb46fbf	Fix share link focus on click ... Clicking on the link share must focus and select it	10 years ago
Roeland Jago Douma	9071e756a1	Fix for broken ajax/share.php endpoint ... Even more code mess :( All tests pass again. But I'm really not happy with this endpoint.	10 years ago
Tom Needham	e3ae453ee5	Fix line lengths in share dialog unit tests	10 years ago
Tom Needham	8a6d22d751	Add JS tests for share autocompletion handling	10 years ago
Tom Needham	2ca5b1aa1f	Add test for remote share info tooltop	10 years ago
Vincent Petry	3af2ad0cd9	Fix DOM element ids in share dialog ... - Rely on class names instead of global ids - When global ids are needed for label+checkbox, append the view id (cid) to the element's id This fixes the checkboxes when multiple sidebars exist in the DOM.	10 years ago
Roeland Jago Douma	08600a7ed5	Add unit tests for sending e-mail for link shares	10 years ago
Morris Jobke	b519965408	[admin] check for correct PHP memcached module	10 years ago
Roeland Jago Douma	8c459a895d	Do not remove linkshare if there is none ... If the password is enforced we can't create a link share right away but just show the password field. Untoggling the link sharing should not try to remove the share. * Added unit test	10 years ago
Roeland Jago Douma	96deeca34d	Use DD-MM-YYYY consistently in share sidebar ... We used to display the response from the server. Which is in non ISO8601 format. Now this is weird since the datepickers shows us 'DD-MM-YYYY' once a date is chosen. Now use momentJS to properly format the date. * Unit tests updated	10 years ago
Vincent Petry	76e30d0df7	Expiration date was always a string	10 years ago
Vincent Petry	0db9b28f3f	Fix ShareItemModel.hasUserShares to only check shares of current item ... The shares array is based on what the server returns and can contain share info for parent folders. hasUserShares is now fixed to ignore parent folders and only checks for shares on the current item.	10 years ago
Vincent Petry	6ea27e2b03	Fix parsing int attributes from share.php response ... Sometimes the attributes returned by share.php are integers but packaged as strings. This fix makes sure that such attributes are parsed as integers	10 years ago
Vincent Petry	02d68d0613	Removed obsolete tests	10 years ago
Vincent Petry	f439c07ba9	Fix allow reshare for owner when sharing with self through group	10 years ago
Vincent Petry	996639f4fb	More unit tests for share dialog	10 years ago
Vincent Petry	886f1ed660	Update JS unit tests for share dialog (WIP)	10 years ago