10536 Commits (a32b002cff4ace48a06fe7f45be85cb64862fbbe)

Author	SHA1	Message	Date
Jenkins for ownCloud	a2848af625	[tx-robot] updated from transifex	11 years ago
Morris Jobke	c60c793cf2	More cleanups of OC_Config usage	11 years ago
Lukas Reschke	1f69dcb593	Use URLGenerator instead of hard-coded WEBROOT ... Fixes https://github.com/owncloud/core/issues/20922	11 years ago
Morris Jobke	aa0265bd34	Replace OC_Config in setup	11 years ago
Jesús Macias	9dd11091d4	Fix code from comments	11 years ago
Jesús Macias	98f5c50aa4	Migrate storate status code to storagenotavailablexception	11 years ago
Jesús Macias	4ead2bc861	Fix code from PR comments	11 years ago
Jesús Macias	7cd13f462a	Add new external storage exceptions for different errors	11 years ago
Thomas Müller	dcc7ff09ba	Adding unit test for MailNotifications::sendInternalShareMail()	11 years ago
Thomas Müller	eebe2b9c23	User IUser::getEMailAddress() all over the place	11 years ago
Morris Jobke	37ecde065b	Replace old config code with usage of proper APIs	11 years ago
Morris Jobke	baecfc4080	Reduce OC_Config usage in lib/ ... * replaced by proper public interfaces	11 years ago
Thomas Müller	28ceab2f61	Fix endless recursion	11 years ago
Robin Appelman	0062888aaf	Also add metadata for postDelete hooks triggered from the view	11 years ago
Lukas Reschke	4d9af08f12	Execute only for web and not for CLI	11 years ago
Lukas Reschke	09d9e430d8	Add a trailing slash to generated URLs	11 years ago
Lukas Reschke	125b7e7512	Ensure that ownCloud is always accessed with a trailing slash	11 years ago
Thomas Müller	4c695e63c0	Fix comments	11 years ago
Thomas Müller	0391cc0451	Fix getCloudId	11 years ago
Thomas Müller	6abc02cb88	Proposal: add enumeration function to IUserManager which simply calls a callbask for each user in all backends	11 years ago
Thomas Müller	df6fc6cc70	Add the user's cloud id to the vCard	11 years ago
Thomas Müller	dad6470baa	Add IUser::getAvatarImage() for easy access	11 years ago
Jenkins for ownCloud	4f4b91a9ec	[tx-robot] updated from transifex	11 years ago
Roeland Jago Douma	b00db2c933	DI in avatar code ... * DI in avatar code * Use the node API * More unit tests * Unit tests no longer require DB	11 years ago
Lukas Reschke	6a067b1ec9	Set RewriteBase to / if OC::WEBROOT is not set	11 years ago
Lukas Reschke	002e719789	Set "SetEnv" within base `.htaccess` file ... mod_rewrite as used by the front controller may require a `RewriteBase` in case the installation is done using an alias. Since we cannot enforce a writable `.htaccess` file this will move the `front_controller_active` environment variable into the main .htaccess file. If administrators decide to have this one not writable they can still enable this feature by setting the `front_controller_active` environment variable within the Apache config.	11 years ago
Morris Jobke	3061e5d2fc	Check the expiration date for null ... * null is always less than any value -> expirationDate gets null which is "no date set" * ref https://github.com/owncloud/core/issues/20590#issuecomment-158393075	11 years ago
Robin Appelman	62cc316c6a	remove old propagation logic	11 years ago
Joas Schilling	44852ce324	Allow DI for OCP\Files\IMimeTypeDetector	11 years ago
Lukas Reschke	2515cb17be	Support pretty URLs ... This changeset allows ownCloud to run with pretty URLs, they will be used if mod_rewrite and mod_env are available. This means basically that the `index.php` in the URL is not shown to the user anymore. Also the not deprecated functions to generate URLs have been modified to support this behaviour, old functions such as `filePath` will still behave as before for compatibility reasons. Examples: http://localhost/owncloud/index.php/s/AIDyKbxiRZWAAjP => http://localhost/owncloud/s/AIDyKbxiRZWAAjP http://localhost/owncloud/index.php/apps/files/ => http://localhost/owncloud/apps/files/ Due to the way our CSS and JS is structured the .htaccess uses some hacks for the final result but could be worse... And I was just annoyed by all that users crying for the removal of `index.php` ;-)	11 years ago
Joas Schilling	1d0c041ac8	Add a method to get the list of tags from the TagNotFound Exception	11 years ago
Robin Appelman	0d63e95a5d	Add metadata to post delete hooks	11 years ago
Joas Schilling	1761fdd9ee	Fix the docs of the exceptions and remove hardcoded language from the message	11 years ago
Lukas Reschke	4971015544	Add code integrity check ... This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release 😉). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF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\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates **Note:** The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following:  As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.	11 years ago
Joas Schilling	3c5a6b829e	Allow DI the system tag stuff without Application class	11 years ago
Lukas Reschke	f4eb15d340	Show error template ... Otherwise this leads to an endless redirection in case of a CSRF exception. Also sets user expectation right.	11 years ago
Thomas Müller	f9fc254672	Add DB group to some files_external tests ... Adding group Db to federation tests and ldap tests Add group DB to Test_UrlGenerator Adding group DB to trashbin and versions tests Adding group DB to Test_Util_CheckServer for pg	11 years ago
Joas Schilling	c4bebf66d4	Do not count the entries when we only need to know if it is at least one	11 years ago
Joas Schilling	aa1a0a15ea	Fix use statements	11 years ago
Joas Schilling	6816b36cdb	Add backticks inside function to escape the column	11 years ago
Vincent Petry	17ce120736	Revert "Dont bother with stream_resolve_include_path if the path is already absolute"	11 years ago
Robin Appelman	6b7e748245	cache resized avatars	11 years ago
Lukas Reschke	391bc49dab	Move files/ajax/scan.php to background job ... The background job will now be executed in chunks of 500 users all 10 minutes.	11 years ago
Lukas Reschke	f3e9106864	Don't trust update server ... In case the update server may deliver malicious content this would allow an adversary to inject arbitrary HTML into the response. So very bad stuff. While signing the response would be better and something we can also do in the future (considering the code signing work), this is already a good first start.	11 years ago
Vincent Petry	b666367a79	Added system tags data structure and PHP side managers ... Added SystemTagManager and SystemTagObjectMapper	11 years ago
Robin Appelman	b05c8faba8	Dont die when we're missing a route	11 years ago
Robin Appelman	816cd66b4b	also log exception	11 years ago
Robin Appelman	50474c6041	Dont bother with stream_resolve_include_path if the path is already absolute	11 years ago
Robin Appelman	ae71f80f4a	Skip unavailable storages in scanner	11 years ago
Mitar	59511d97ee	Also allow empty value for no-HTTPS. ... This makes it work better with old version of Nginx.	11 years ago