nextcloud-server

Commit Graph

Author	SHA1	Message	Date
Jenkins for ownCloud	b585d87d9d	Update license headers	10 years ago
Lukas Reschke	bbd5f28415	Let users configure security headers in their Webserver Doing this in the PHP code is not the right approach for multiple reasons: 1. A bug in the PHP code prevents them from being added to the response. 2. They are only added when something is served via PHP and not in other cases (that makes for example the newest IE UXSS which is not yet patched by Microsoft exploitable on ownCloud) 3. Some headers such as the Strict-Transport-Security might require custom modifications by administrators. This was not possible before and lead to buggy situations. This pull request moves those headers out of the PHP code and adds a security check to the admin settings performed via JS.	10 years ago
Bernhard Posselt	95239ad21e	AppFramework StreamResponse First stab at the StreamResponse, see #12988 The idea is to use an interface ICallbackResponse (I'm not 100% happy with the name yet, suggestions?) that allow the response to output things in its own way, for instance stream the file using readfile Unittests are atm lacking, plan is to check if a mock of ICallbackResponse will be used by calling its callback (also unhappy with this name) method Usage is: $response = new StreamResponse('path/to/file'); rename io to output, add additional methods and handle error and not modified cases when using StreamResponse fix indention and uppercasing, also handle forbidden cases fix indention fix indention no forbidden, figuring out if a file is really readable is too complicated to get to work across OSes and streams remove useless import remove useless import fix intendation	10 years ago
Morris Jobke	06aef4e8b1	Revert "Updating license headers" This reverts commit `6a1a4880f0`.	10 years ago
Lukas Reschke	9adcd15cb3	Use [0] instead of current as HHVM might have problems with that	10 years ago
Lukas Reschke	1c6eae9017	Get the real protocol behind several proxies X-Forwarded-Proto contains a list of protocols if ownCloud is behind multiple reverse proxies. This is a revival of https://github.com/owncloud/core/pull/11157 using the new IRequest public API.	10 years ago
Vincent Petry	9f6dcb9d3e	Sabre Update to 2.1 - VObject fixes for Sabre\VObject 3.3 - Remove VObject property workarounds - Added prefetching for tags in sabre tags plugin - Moved oc_properties logic to separate PropertyStorage backend (WIP) - Fixed Sabre connector namespaces - Improved files plugin to handle props on-demand - Moved allowed props from server class to files plugin - Fixed tags caching for files that are known to have no tags (less queries) - Added/fixed unit tests for Sabre FilesPlugin, TagsPlugin - Replace OC\Connector\Sabre\Request with direct call to httpRequest->setUrl() - Fix exception detection in DAV client when using Sabre\DAV\Client - Added setETag() on Node instead of using the static FileSystem - Also preload tags/props when depth is infinity	10 years ago
Thomas Müller	0a9b8242ee	properly initialize OC::$WEBROOT and host name	10 years ago
Jenkins for ownCloud	6a1a4880f0	Updating license headers	10 years ago
Lukas Reschke	cebf9f6a5a	Incorporate review changes	10 years ago
Lukas Reschke	992164446c	Add blackmagic due to cyclic dependency 🙈	10 years ago
Lukas Reschke	9f91d64918	Make scrutinizer happy	10 years ago
Lukas Reschke	886bda5f81	Refactor OC_Request into TrustedDomainHelper and IRequest This changeset removes the static class `OC_Request` and moves the functions either into `IRequest` which is accessible via `\OC::$server::->getRequest()` or into a separated `TrustedDomainHelper` class for some helper methods which should not be publicly exposed. This changes only internal methods and nothing on the public API. Some public functions in `util.php` have been deprecated though in favour of the new non-static functions. Unfortunately some part of this code uses things like `__DIR__` and thus is not completely unit-testable. Where tests where possible they ahve been added though. Fixes https://github.com/owncloud/core/issues/13976 which was requested in https://github.com/owncloud/core/pull/13973#issuecomment-73492969	10 years ago
Lukas Reschke	770fa761b8	Respect `mod_unique_id` and refactor `OC_Request::getRequestId` When `mod_unique_id` is enabled the ID generated by it will be used for logging. This allows for correlation of the Apache logs and the ownCloud logs. Testplan: - [ ] When `mod_unique_id` is enabled the request ID equals the one generated by `mod_unique_id`. - [ ] When `mod_unique_id` is not available the request ID is a 20 character long random string - [ ] The generated Id is stable over the lifespan of one request Changeset looks a little bit larger since I had to adjust every unit test using the HTTP\Request class for proper DI. Fixes https://github.com/owncloud/core/issues/13366	10 years ago
Bernhard Posselt	bb0c88a577	always set url parameters when they are available in the app dispatch prefer url parameters passed into the main method. If they are not present, use the containers urlParameters add space	10 years ago
Lukas Reschke	048139074d	Add functions to modify cookies to response class Currently there is no AppFramework way to modify cookies, which makes it unusable for quite some use-cases or results in untestable code. This PR adds some basic functionalities to add and invalidate cookies. Usage: ```php $response = new TemplateResponse(...); $response->addCookie('foo', 'bar'); $response->invalidateCookie('foo'); $response->addCookie('bar', 'foo', new \DateTime('2015-01-01 00:00')); ``` Existing cookies can be accessed with the AppFramework using `$this->request->getCookie($name)`.	10 years ago
Bernhard Posselt	0696099bad	add dataresponse fix docstrings adjust copyright date another copyright date update another header update implement third headers argument, fix indention, fix docstrings fix docstrings	11 years ago
Lukas Reschke	41374986d3	Remove dead code	11 years ago
Georg Ehrke	c30bea45e9	don't typecast null values inside dispatcher.php	11 years ago
Bernhard Posselt	0252d39bb6	fix indention	11 years ago
Bernhard Posselt	1002281dae	handle http accept headers more gracefully	11 years ago
Bernhard Posselt	a152e320f6	make it possible to omit parameters and use the default parameters from the controller method	11 years ago
Bernhard Posselt	3e58a767ad	Fix method signature	11 years ago
Bernhard Posselt	1d45239c65	adjust license headers to new mail address	11 years ago
Bernhard Posselt	cb666c18d6	rename formatter to responder, formatResponse to buildResponse	11 years ago
Bernhard Posselt	ede7325772	fix broken if	11 years ago
Bernhard Posselt	d8da79cab0	add test for not failing when adding more comments after type parameters, do not limit x-www-form-urlencoded to POST	11 years ago
Bernhard Posselt	80648da431	implement most of the basic stuff that was suggested in #8290	11 years ago
Bernhard Posselt	7e447f4f42	make download and redirectresponse public	11 years ago
Bernhard Posselt	62cce982bb	default to GET request when no method is set to fix unittests, also set parsed json parameters on the post attribute	11 years ago
Bernhard Posselt	e7fa2790f3	Correctly process request parameters other than GET or POST, dont use globals in the class but inject it	11 years ago
Scrutinizer Auto-Fixer	adaee6a5a1	Scrutinizer Auto-Fixes This patch was automatically generated as part of the following inspection: https://scrutinizer-ci.com/g/owncloud/core/inspections/cdfecc4e-a37e-4233-8025-f0d7252a8720 Enabled analysis tools: - PHP Analyzer - JSHint - PHP Copy/Paste Detector - PHP PDepend	11 years ago
Jörn Friedrich Dreyer	2a6a9a8cef	polish documentation based on scrutinizer patches	11 years ago
Thomas Tanghus	ad017285e1	Fix namespace for OCP\Appframework\Http To avoid having to use OCP\Appframework\Http\Http in the public - and stable - API OCP\Appframework\Http is now both a class and a namespace.	12 years ago
Thomas Tanghus	d75d80ba13	OCP\AppFramework\Controller\Controller => OCP\AppFramework\Controller	12 years ago
Thomas Müller	e071bfc144	fixing SecurityMiddleware to use OC6 API	12 years ago
Bart Visscher	21cbef0d2c	passesCSRFCheck added to OCP\IRequest	12 years ago
Thomas Tanghus	aedc427ffd	Fix fix of POST :P	12 years ago
Thomas Tanghus	8a018d7a59	Fix POST decoding	12 years ago
Thomas Tanghus	965ce5719f	Modified PUT behaviour Now only non-parable PUT requests return a stream resource.	12 years ago
Thomas Tanghus	0f13ffb773	Remove JSON request parsing from Server	12 years ago
Thomas Tanghus	973bcccd7c	Implement PUT an PATCH support	12 years ago
Thomas Tanghus	bdad7697ac	Check if accessor matched request method. It's easier to find errors in the code if an exception is thrown.	12 years ago
Thomas Müller	9c9dc276b7	move the private namespace OC into lib/private - OCP will stay in lib/public Conflicts: lib/private/vcategories.php	12 years ago

46 Commits (7bff0681feea57c1eb2f81015d574063b848b616)