Commit Graph

364 Commits (95f42d6544262f54fa3cb832ebd12b2bbc15f88f)

Author SHA1 Message Date
Lukas Reschke d33bec09fe Verify password page for users 12 years ago
Michael Göhler 7095b3a083 extend logon page to display multiple error messages 12 years ago
Lukas Reschke 2c427f050e Show a warning in the installer if no secure RNG is available 12 years ago
Björn Schießle f493e97f5d always generate access token, also for forms shown to anonymous users (e.g. public shares) 12 years ago
Robin Appelman f8eebcbb01 reload the current url when login in instead of always redirecting to the default app (oc-1873) 12 years ago
Lukas Reschke 578aa4e425 Removed sectoken 12 years ago
Christian Reiner 71454b1bca Fix to preserve backward compatibility for apps creating static links containing the request token (currently the contacts app and maybe some 3rd party implementations) 12 years ago
Christian Reiner 743826bbf3 Reimplementation of CSRF protection including autorefresh 12 years ago
Frank Karlitschek df528cfe95 show the current username. This confused some people 12 years ago
Bart Visscher edcd297476 Move handling of core remotes to OC_TemplateLayout 12 years ago
Thomas Mueller 3829460ab8 adding space between) and { 12 years ago
Bart Visscher 6324daecc0 Don't wait for document ready for setting requesttoken 12 years ago
Michael Gapczynski e5cbc532c3 Fix password authentication for links and fix template problems for links by creating a new base layout 12 years ago
Bart Visscher 667cd318fe Use OC_Util::displayLoginPage and cleanup the function 12 years ago
Thomas Tanghus cc445e4e47 Small changes to allow updating main menu dynamically. 12 years ago
Jörn Friedrich Dreyer 795e78809f add oracle to install & setup 13 years ago
Robin Appelman b1010160b3 CSRF protection for eventsource 13 years ago
Bjoern Schiessle 20a174e71b remove second "autocomplete" statement 13 years ago
Bjoern Schiessle 3895e3a5ae remember username and provide autocomplete feature 13 years ago
Bjoern Schiessle 0ea29398c7 remember username and provide autocomplete feature 13 years ago
Georg Ehrke a113ee9e9f add x-webkit-speech to searchbox 13 years ago
Bjoern Schiessle 34739b7ec5 use new sanitizeHTML() function 13 years ago
Florian Hülsmann c3cd3f3571 CSS class headerAction -> header-action 13 years ago
Florian Hülsmann 4a50c15a8e corrected header width and floating (can now dynamically add stuff to header); someone may test this in IE 13 years ago
Thomas Tanghus f0b87bc421 Make requesttoken global. 13 years ago
Thomas Tanghus 5b1a14f9ea Contacts: Implement CSRF prevention. 13 years ago
Thomas Tanghus 625cd822c3 Backport CSRF prevention. 13 years ago
Thomas Tanghus 89464721c7 Added JSON methods for CSRF prevention. Make request token accessible from template and add js var. 13 years ago
Lukas Reschke 6defbc7f4d Removed some unessecary sanitizations 13 years ago
Lukas Reschke 2b22c538c8 Make some apps compatible 13 years ago
Bart Visscher 4260dce826 Better handling of core.css and core.js 13 years ago
Brice Maron 5c2b2fc842 Change app path logic in templates 13 years ago
Brice Maron cc494259d3 Unit path and webpath, correct some more 13 years ago
Michiel de Jong fc536c3491 add htmlentities() call into login form 13 years ago
Bart Visscher ce1e4425c2 Combine and minimize core and default app js files 13 years ago
Bart Visscher f71fec8cdc Combine and minimize core and default app css files 13 years ago
Michael Gapczynski 198b73ddd1 Sanitize search queries, thanks to Lukas Reschke 13 years ago
Bart Visscher 20499e336b Remove duplicate line 13 years ago
Vitaly Kuznetsov 6f981738bb Fix some non-utf8-friendly htmlentities (resulting in wrong display of utf8-encoded directory names for example) 13 years ago
Thomas Tanghus 27da29525a Made the global settings icon accessable via keyboard. 13 years ago
Georg Ehrke c536e930f4 add appswebroot to the guest template 13 years ago
Frank Karlitschek 051cb7d96b show the username in the title. good idea. 13 years ago
Frank Karlitschek 74b5e22a68 some more csrf fixes 13 years ago
Georg Ehrke ebcaa46482 fix loading of css files that are core related 13 years ago
Georg Ehrke a85d49833b fix position of Semicolon 13 years ago
Georg Ehrke 684007bbae fix pathes in contacts 13 years ago
Robin Appelman cfd0140e2f fix 2 potential xss problems 13 years ago
Jan-Christoph Borchardt 70d0103a67 updated logos and icons 13 years ago
Jan-Christoph Borchardt 5868199e85 fixed settings hover, now whole row sensitive and fading not jerky 13 years ago
Frank Karlitschek 56bc2c4591 add a title attribute to the logout button 13 years ago