1195 Commits (9560e00cf3e5eaec2f047183165fb89ecdd2f630)

Author	SHA1	Message	Date
Côme Chilliet	9560e00cf3	chore: Remove useless legacy autoloader for tests ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	8 months ago
Louis Chemineau	009d0c550c	fix: Move CSRF check from base to PublicAuth for public.php ... This currently prevent directly accessing a ressource when clicking on a link on a third party site. Example, clicking on `https://example.com/public.php/dav/files/pqLWcA269zfzXez/?accept=zip` in a GitHub comment. Skipping the check is an issue with password protected shares, as it allows third party sites to request the ressource when the user already entered the password, aka CSRF. So after removing the check from `base.php`, we need to add the it again in the `PublicAuth` plugin. We also add a redirect to be helpful to the user. **Warning**: this adds the limitation that clicking on a direct download link for password protected shares will redirect you to the password form, and then to the main share view. Fix #52482 Signed-off-by: Louis Chemineau <louis@chmn.me>	8 months ago
Ferdinand Thiessen	22889d4f1d	chore: deprecate `OC_Helper::isReadOnlyConfigEnabled` ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	8 months ago
Côme Chilliet	536ccf144c	feat(encryption): Migrate from hooks to events ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	8 months ago
Côme Chilliet	20c6d1a7e9	feat: Improve init a bit, and add more profiling steps ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	8 months ago
Julius Knorr	3fc9a99521	perf: Add config options to trigger individual and sample profiling using excimer ... Signed-off-by: Julius Knorr <jus@bitgrid.net>	9 months ago
Côme Chilliet	0cf4f3cc71	fix: Replace all usages of OC_User backend method calls by IUserManager ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	9 months ago
Côme Chilliet	b2100484c0	fix: Remove some call and references to deprecated OC_Util class ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	9 months ago
Joas Schilling	34bcc53fb9	fix(base.php): Correct order for booting \OC\Server ... A recent change had broken authentication with an older FastCGI Apache2 module, because the IRequest object got initialised before the fix from self::handleAuthHeaders() copied the authentication headers into the correct $_SERVER variables. Since this part is completely independent from any Nextcloud code it is now done as a first thing within the init() call. Additionally similar issues could happen when another class would boot too early and read other global PHP settings like ini values and default timezone, so those are now also moved to the beginning. Signed-off-by: Joas Schilling <coding@schilljs.com>	10 months ago
Côme Chilliet	f033ef7c18	fix: Migrate all uses of OCP\Template to OCP\Template\ITemplateManager ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	10 months ago
Côme Chilliet	71dc34c03c	fix: Deprecate OC_Template, add proper template manager instead ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	10 months ago
provokateurin	dd47daa4a8	fix(Share20): Convert broken hooks to IEventListener ... Signed-off-by: provokateurin <kate@provokateurin.de>	10 months ago
DaleBCooper	e1e0b68feb	Fix A+ rating when checking with Nextcloud Security Scan. ... Due to commit 33d7019 session.cookie_secure=true is not set when accessing /status.php. This results in a degration from A+ to A rating due to missing __Host prefix for nc_sameSiteCookielax and nc_sameSiteCookiestrict cookies.	10 months ago
Côme Chilliet	34139987d6	fix: Replace OC_App calls by IAppManager ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	11 months ago
Julius Knorr	d31bc88a23	perf: Log requests using high amount of memory as warning ... Signed-off-by: Julius Knorr <jus@bitgrid.net>	11 months ago
Côme Chilliet	a3685551f7	fix: Replace isInstalled calls with isEnabledForAnyone or isEnabledForUser ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	11 months ago
Côme Chilliet	b45bc2a462	fix: Use the new countUsersTotal method where it makes sense ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Git'Fellow	33d7019f58	fix(status): Avoid session creation for status requests ... Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>	1 year ago
Ferdinand Thiessen	0cd626a059	fix: Do not check for strict cookie when running webcron ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Julius Knorr	606241caeb	chore(legacy): Introduce public version ct plass and drop version methods from OC_Util ... Signed-off-by: Julius Knorr <jus@bitgrid.net>	1 year ago
provokateurin	9836e9b164	chore(deps): Update nextcloud/coding-standard to v1.3.1 ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Ferdinand Thiessen	9e979d42b4	fix(setup-checks): Ensure URL with webroot works ... We basically mock the way `URLGenerator::getAbsoluteURL` works, so we must make sure that the URL might already contain the webroot. Because `baseURL` and `cliURL` also contain the webroot we need to remove the webroot from the URL first. Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Daniel <mail@danielkesselberg.de> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Maxence Lange	9100b8757e	fix(setup): ignore long session login during installation ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	1 year ago
Daniel Kesselberg	af6de04e9e	style: update codestyle for coding-standard 1.2.3 ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	1 year ago
Josh Richards	8032b6ac63	(base) Give a hint in web interface if SimpleXML (php-xml) is missing ... Fixes #2180 And prevents #31473, #23970, #18610, #15708 Avoids a 500 error and also gives a useful error message on the web interface if this module isn't installed, gets overlooked during a PHP upgrade, etc. While we check for it later, it's too late for session. Inspired by #17163 Signed-off-by: Josh Richards <josh.t.richards@gmail.com>	1 year ago
Christoph Wurst	2b38d6ae7e	fix(session): Log when session_* calls are slow ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	1 year ago
Côme Chilliet	5b9966feba	fix(occ): Use the const instead of hardcoded string for --debug-log option ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Côme Chilliet	9baf8fea8c	fix(occ): Move debug log listener setup to a static method, add option for level ... Also changed option from --debug to --debug-log to avoid conflicts Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Côme Chilliet	2ba0819243	feat(occ): Add a --debug option to output all log levels to the output ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Andy Scherzinger	dae7c159f7	chore: Add SPDX header ... Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Daniel Kesselberg	fedc80d4ea	chore: remove unnecessary ini_set ... Changing gc_maxlifetime cannot have any effect because this configuration option does not exist. There is a configuration option named session.gc_maxlifetime. I removed the ini_set call because autoconfiguring is error-prone, and the current code could never have worked as intended. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	2 years ago
Côme Chilliet	b7acecd006	fix: Fix default values for ini var in lib/base.php ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Côme Chilliet	f2c36a55fe	fix: Remove unused endpoint from base.php ... It’s not called anymore, and app loading cannot break boot anymore Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
MichaIng	7b137ddd75	feat(updater): hide overwrites from disabled apps list on upgrade ... If an incompatible app is enabled manually, it is added to the "app_install_overwrite" array in config.php. Nextcloud upgrades won't disable any app in this array, but they were still shown on the upgrade page and logs as being disabled. This commit assures that only apps which are really disabled, i.e. which are not in the "app_install_overwrite" array, are shown and logged as disabled during upgrades. Signed-off-by: MichaIng <micha@dietpi.com>	2 years ago
Côme Chilliet	ccc66e912b	fix: Use DI for Setup class and move away from deprecated methods ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
John Molakvoæ	3214324b72	fix(l10n): invalid translation of a number ... fix https://github.com/nextcloud/server/issues/35252 Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>	2 years ago
Joas Schilling	7998afe8b3	Talk federation authentication ... Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
Côme Chilliet	f68d4f7300	Remove deprecated methods Util::writeLog and DIContainer::log ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Arthur Schiwon	603a659a37	fix(autoloader): no apcu no side effects ... apcu lead to side effects especially with app management and (soft) inter-dependencies, and lead also to 500 server errors. While we could add management to clear apcu cache in many cases (may stil leave edge cases) the performance benefit is marginally as also class maps are already cached in opcache. Hence, the simple and effective way to go is to not use apcu for autoloading. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Alexander Piskun	01a11641f4	new name of AppEcosystem is AppAPI ... Signed-off-by: Alexander Piskun <bigcat88@icloud.com>	2 years ago
Joas Schilling	25309bcb45	techdebt(DI): Use public IThrottler interface which exists since Nextcloud 25 ... Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
Andrey Borysenko	d3583d3f30	Fix psalm ci (stub). Wrap server container with try-catch ... Signed-off-by: Andrey Borysenko <andrey18106x@gmail.com>	2 years ago
Alexander Piskun	ca76ab98bd	added Application Ecosystem V2 login handler ... Signed-off-by: Alexander Piskun <bigcat88@icloud.com>	2 years ago
Joas Schilling	0c5d0c2127	fix: Migrate collaboration listener and remove legacy adapter ... Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
Joas Schilling	2014e7b836	fix(apps): Fix loading info.xml file ... Ref: https://bugs.php.net/bug.php?id=62577 Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Simon L	918859cafd	allow to specify upgrade.cli-upgrade-link in order to link to the correct documentation ... Signed-off-by: Simon L <szaimen@e.mail.de>	3 years ago
Simon L	d293293cda	Fixed bug which 'overwritewebroot' does not work with 'overwritecondaddr'. ... Signed-off-by: Takahiro Nagai <78393959+takahiro-blab@users.noreply.github.com> Signed-off-by: Simon L <szaimen@e.mail.de>	3 years ago
Simon L	84b88c01c7	adjust wording ... Signed-off-by: Simon L <szaimen@e.mail.de>	3 years ago
Simon L	6e5a307757	adjust wording for update hint when files of a specific app are not there ... Signed-off-by: Simon L <szaimen@e.mail.de>	3 years ago
Arthur Schiwon	bb4b34ff69	Read mtime of version.php only once ... - in most cases it would read again in \OC_Util::loadVersion anyway - remove some unused use statements Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	3 years ago