3 Commits (5cd1880daa048a685da689c7f41a2e50486494de)

Author	SHA1	Message	Date
Morris Jobke	92b5743bf4	Remove unused php5 config from .htaccess ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Maxence Lange	6642efa7f4	adding .well-known/webfinger ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	7 years ago
Robin McCorkell	aac84f732d	Unit test OC_Files::setUploadLimit() ... There was also a bug with checking the upper limit on the passed upload size. PHP does funny things with integer vs float comparisons, so our check didn't work. Now the check is much simpler, and ensures the value is sane.	11 years ago
Frank Karlitschek	2eb9936d77	This will be 8.2 in the future	11 years ago
Lukas Reschke	9d1ce53cb1	Add some generic default headers as well via PHP	11 years ago
Wolfgang Karall	6cc50ecfab	use permanent redirect for .well-known/(cal|card)dav, add 'L' flag	11 years ago
Lukas Reschke	bbd5f28415	Let users configure security headers in their Webserver ... Doing this in the PHP code is not the right approach for multiple reasons: 1. A bug in the PHP code prevents them from being added to the response. 2. They are only added when something is served via PHP and not in other cases (that makes for example the newest IE UXSS which is not yet patched by Microsoft exploitable on ownCloud) 3. Some headers such as the Strict-Transport-Security might require custom modifications by administrators. This was not possible before and lead to buggy situations. This pull request moves those headers out of the PHP code and adds a security check to the admin settings performed via JS.	11 years ago
Lukas Reschke	d201f1c47e	Fix version rev	11 years ago
Frank Karlitschek	270d404ee2	This is 8.0.1 now	11 years ago
Lukas Reschke	43641d917b	Use "off" and "off" instead of true booleans ... Apparently a boolean in php.ini is according to the documentation "on" or "off"… Fixes itself.	11 years ago
Lukas Reschke	9b46e3b3d5	Add expected values to default config as well	11 years ago
Fernando Rodriguez Sela	66b584ae7e	Setting default charset to UTF-8 in .htaccess and .user.ini	11 years ago
Lukas Reschke	20199dd168	Reference module with `.c` ... Fixes https://github.com/owncloud/core/issues/13657	11 years ago
Lukas Reschke	bb80cf4eca	Add check for `HTTP_RAW_POST_DATA` setting for >= 5.6 ... PHP 5.6 otherwise throws notices for perfectly valid code which results in broken endpoints. Fixes https://github.com/owncloud/core/issues/13592	11 years ago
Lukas Reschke	7fbb7f4dc4	Add version to .htaccess ... Currently if a user does not replace the .htaccess file with the new update this can lead to serious problems in case Apache is used as webserver. This commit adds the version to the .htaccess file and the update routine fails in case not the newest version is specified in there. This obviously means that every release has to update the version specified in .htaccess as well. But I see no better solution for it. Conflicts: lib/private/updater.php	11 years ago
Morris Jobke	e97219cf75	escape . in htaccess regex for CSS and JS HTTP headers	11 years ago
Robert Jäckel	1a6928f447	blocked 3rdparty instead of l10n	11 years ago
Robert Jäckel	8c3bf139ff	restrict access to public files only ... use mod_rewrite to pretend theese files are not existend for security purposes	11 years ago
Thomas Müller	4b5c7d3d9d	adding cache control headers for css and js - fixes #11496	11 years ago
Lukas Reschke	bd4f3849a3	That file was accidentally commited. Partially revert f2fc214ce0	12 years ago
Lukas Reschke	f2fc214ce0	Add deprecation notice to load* functions ... This functions are deprecated and/or removed since ownCloud 7. Additionally a issubdirectory check has been added here to prevent developers to use this function in a potentially insecure way. Port of https://github.com/owncloud/core/pull/9033	12 years ago
Lukas Reschke	ac7fb1b23e	Remove legacy routing code ... The getfile routing code was absolutely legacy and not needed anymore. Additionally \OC::$REQUESTEDAPP was never set to the actually accessed application. This commit removes the legacy routing code and ensures that $REQUESTEDAPP is always set so that other applications (e.g. the firewall or a two-factor authentication) can intercept the currently accessed app. Testplan: [x] Installation works [x] Login with DB works [x] Logout works [x] Login with alternate backend works (tested with user_webdavauth) [x] Other apps are accessible [x] Redirect on login works (e.g. index.php?redirect_url=%2Fcore%2Findex.php%2Fsettings%2Fapps%3Finstalled) [x] Personal settings are accessible [x] Admin settings are accessible [x] Sharing files works [x] DAV works [x] OC::$REQUESTEDAPP contains the requested application and can be intercepted by other applications	12 years ago
Felix Eckhofer	61ca269292	Remove trailing tab	12 years ago
Felix Eckhofer	460d06c235	Escape literal dots in mod_rewrite regexes	12 years ago
Lukas Reschke	357fdb1a4d	Remove .htaccess creation code ... 1. We're maintaining the same code twice which leads inevitably to problems as this one. The createHtaccess routine is only used to use the correct paths to the 404 and 403 document. 2. Updating the ownCloud instance as described in our documentation (`Delete everything from your ownCloud installation directory, except data and config.`) will break the links to the ErrorDocuments anyways and show the default error handlers if ownCloud is not installed in the root directory.	12 years ago
Thomas Müller	01929096fe	revert wrong change to .htaccess	12 years ago
Thomas Müller	bf22ed7bdb	kill old minimizer code	12 years ago
Thomas Müller	269f24cf96	remove css files from rewrite rule - there is no need to rewrite css any more	12 years ago
Thomas Müller	5eef107344	turn off mod_pagespeed	12 years ago
Thomas Tanghus	78559c0863	disable mbstring.func_overload	13 years ago
Daniel Molkentin	a86fe7920b	Try to prefer index.php over index.html in the same directory ... Add JS redirect if that fails (HTTP-based redirects are disabled by default in more recent Firefox versions).	13 years ago
Myles McNamara	ef2e84026e	remove php_value ... php_value can only be used with mod_php, using it with FCGI will cause 500 Internal Server errors.  This needs to be set in php.ini manually or set using ini_set().	13 years ago
Brice Maron	6c26214955	Refix #1931	13 years ago
Bernhard Posselt	26d5992161	add cgi pathinfo when fcgi is enabled #1189	13 years ago
Bernhard Posselt	023f19e929	added defaultcharset to utf-8 in htaccess	13 years ago
Sam Tuke	d2b288ca70	Reverted erroneous commit	13 years ago
Erik Sargent	48d6f33135	Revert "initial setup" ... This reverts commit e1478117b1.	13 years ago
Erik Sargent	e1478117b1	initial setup	13 years ago
Michiel de Jong	e37dd7aa82	add /.well-known/host-meta.json to .htaccess	13 years ago
Stefan Seidel	8f669880bc	Fix WebDAV (and Android Client) not being able to authorize on Debian Squeeze + mod_fcgid installs.	13 years ago
Robin Appelman	6bc156ba69	add svg mimetype to default htaccess	13 years ago
Bjoern Schiessle	bd494f562f	fixed faulty commit	14 years ago
Bjoern Schiessle	378fa2bc86	check if caview really exists	14 years ago
Robin Appelman	f1b10fcc93	update translations	14 years ago
Robin Appelman	f7d221f5f0	update translations	14 years ago
Georg Ehrke	9e83c3f823	add caldav and carddav files in their old place for backward compatibility - add rewriterule for caldav and carddav	14 years ago
Michiel de Jong	4c6d11e223	move auth.css and remoteStorage-big.png to assets folders From where they can be included	14 years ago
Georg Ehrke	3f86fd5193	remove redirects in htaccess to improve compatibility with desktop client	14 years ago
Michiel de Jong	02cee2c562	trying to fix /.well-known/host-meta	14 years ago
Georg Ehrke	a69c53caef	remove empty line in .htaccess	14 years ago