nextcloud-server

Commit Graph

Author	SHA1	Message	Date
Côme Chilliet	82fbab4632	fix: Swap method and uri parameter in request to match upstream order Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Ferdinand Thiessen	01d5af66be	feat(IClient): Add `request` function to do arbitrary HTTP requests Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
Joas Schilling	ecb111cec7	fix(federation): Allow cloud federation providers to handle unsuccessful return codes Otherwise they are put to retry and will immediately trigger bruteforce protection infinitely Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
Robin Kluth	414f8f1f2d	Include `hostName:$port` for Host access violation message as well Signed-off-by: Robin Kluth <Commifreak@users.noreply.github.com>	2 years ago
Robin Kluth	25c0021137	Log Host/IP in `LocalServerException` for `Host violates local access rules` Signed-off-by: Robin Kluth <Commifreak@users.noreply.github.com>	2 years ago
Robin Kluth	d70cd5add2	Log Host/IP in `LocalServerException` for `Host violates local access rules` Signed-off-by: Robin Kluth <Commifreak@users.noreply.github.com>	2 years ago
Daniel Kesselberg	f8f985602b	test: add tests for dns pin middleware Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	2 years ago
Daniel Kesselberg	03f1f1ed2e	enh: skip processing for empty response Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	2 years ago
Daniel Kesselberg	eab46bdfe6	feat: add switch to disable dns pinning Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	2 years ago
Joas Schilling	ec6728d710	feat(HTTPClient): Provide wrapped access to Guzzle's asyncRequest() Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Robin Appelman	e7ab30f5d8	log performance events for http requests Signed-off-by: Robin Appelman <robin@icewind.nl>	3 years ago
Côme Chilliet	426c0341ff	Use typed version of IConfig::getSystemValue as much as possible Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Christoph Wurst	ce259435c2	Fix DNS Pin Middleware throwing for public IPs Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Christoph Wurst	8aea25b5b9	Add remote host validation API Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Christoph Wurst	d4b9b010b0	Rename LocalAddressChecker methods to lower case Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Simon L	11108e8032	Revert "fix external storages access" Signed-off-by: szaimen <szaimen@e.mail.de>	3 years ago
Côme Chilliet	31117fa7c7	Fix tests for nested v4 in v6 Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	7ac688a2e5	Use new dependency to normalize IPs Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	a907b74c2a	Add missing urldecode and idn_to_utf8 calls to local address checker The call to idn_to_utf8 call is actually to apply normalization Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
luz paz	368f83095d	Fix typos in lib/private subdirectory Found via `codespell -q 3 -S l10n -L jus ./lib/private` Signed-off-by: luz paz <luzpaz@github.com>	3 years ago
Côme Chilliet	c5ffd7ce32	Use Symfony IpUtils to check for local IP ranges Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Côme Chilliet	707b46bb01	Check for local IPs nested in IPv6 as well Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Côme Chilliet	d0830432a7	Refactor local IP if and set strict to true for in_array Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Côme Chilliet	bd9aff47b6	Improve local IP detection Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
szaimen	2ad53742f2	fix external storages access Signed-off-by: szaimen <szaimen@e.mail.de>	4 years ago
Côme Chilliet	d23c7d245c	Improve local domain detection Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Côme Chilliet	6be7aa112f	Migrate from ILogger to LoggerInterface in lib/private Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Vincent Petry	9b6a1cc8ae	Send images to imaginary docker to generate previews Signed-off-by: Carl Schwan <carl@carlschwan.eu> Co-Authored-by: Vincent Petry <vincent@nextcloud.com>	4 years ago
Lukas Reschke	84d9b17dc7	Check for !== false instead Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	5 years ago
Lukas Reschke	b0cef8827d	Check if dns_get_record returns non-false `dns_get_record` can return false which results in exceptions such as the ones shown in https://github.com/nextcloud/server/issues/27870. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	5 years ago
Sanpi	81c272a8a5	Fixes recursion count incrementation Signed-off-by: Sanpi <sanpi@homecomputing.fr>	5 years ago
Daniel Kesselberg	b6530e5e82	Ignore subdomain for soa queries Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	5 years ago
Aaron Ball	484913dc31	Fix DnsPinMiddleware resolve pinning bug Libcurl expects the value of the CURLOPT_RESOLVE configurations to be an array of strings, those strings containing a comma delimited list of resolved IPs for each host:port combination. The original code here does create that array with the host:port:ip combination, but multiple ips for a single host:port result in additional array entries, rather than adding them to the end of the string with a comma. Per the libcurl docs, the `CURLOPT_RESOLVE` array entries should match the syntax `host:port:address[,address]`. This creates a function-scoped associative array which uses `host:port` as the key (which are supposed to be unique and this ensures that), and the value is an array containing IP strings (ipv4 or ipv6). Once the associative array is populated, it is then set to the CURLOPT_RESOLVE array, imploding the ip arrays using a comma delimiter so the array syntax matches the expected by libcurl. Note that this reorders the "foreach ip" and "foreach port" loops. Rather than looping over ips then ports, we now loop over ports then ips, since ports are part of the unique host:port map, and multiple ips can exist therein. Signed-off-by: Aaron Ball <nullspoon@oper.io>	5 years ago
John Molakvoæ (skjnldsv)	215aef3cbd	Update php licenses Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	5 years ago
Arthur Schiwon	9f5480eef4	ensure redis returns bool for hasKey Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	5 years ago
Lukas Reschke	5fe1f134f9	Strictify null check Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	5 years ago
Lukas Reschke	5f3abffe6f	Improve networking checks Whilst we currently state that SSRF is generally outside of our threat model, this is something where we should invest to improve this. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	5 years ago
Roeland Jago Douma	41c80d6c19	Fix option in the client code itself as well Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Christoph Wurst	d89a75be0b	Update all license headers for Nextcloud 21 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Carlos Ferreira	a42eb05a35	Simple typo in comments	5 years ago
Roeland Jago Douma	54b9f639a6	Always return the default path if we can Just check in the certifcate manager. So every part of the system that request the certificatebundle gets the defaullt one (the 99% case) if we can. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Christoph Wurst	2a054e6c04	Update the license headers for Nextcloud 20 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Joas Schilling	9127731c52	parse_url returns null in case a parameter is not found Signed-off-by: Joas Schilling <coding@schilljs.com>	6 years ago
Morris Jobke	18b0d753f2	Do not read certificate bundle from data dir by default Before the resources/config/ca-bundle.crt was only used when the list of custom certificates was empty and the instance was not installed. But it should also be used when the list is empty and the instance is installed. This is inverting the logic to stop if the instance is not installed to use the default bundle. And it also does this when the list is empty. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	6 years ago
Morris Jobke	8bcd1c31da	Allow gzip encoded requests by default Signed-off-by: Morris Jobke <hey@morrisjobke.de>	6 years ago
Christoph Wurst	cb057829f7	Update license headers for 19 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Joas Schilling	5e402f8aae	Check all remotes for local access Signed-off-by: Joas Schilling <coding@schilljs.com>	6 years ago
Christoph Wurst	caff1023ea	Format control structures, classes, methods and function To continue this formatting madness, here's a tiny patch that adds unified formatting for control structures like if and loops as well as classes, their methods and anonymous functions. This basically forces the constructs to start on the same line. This is not exactly what PSR2 wants, but I think we can have a few exceptions with "our" style. The starting of braces on the same line is pracrically standard for our code. This also removes and empty lines from method/function bodies at the beginning and end. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	1a9330cd69	Update the license headers for Nextcloud 19 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Mohammed Abdellatif	98d6415264	Add support for GuzzleHTTP 'no' proxy The custom config allows to setup a proxy URI that is passed to GuzzleHTTP client as request options. Guzzle has the option to receive an array of proxies for each URI scheme as well as 'no' key value pair to provide a list of host names that should not be proxied to. Guzzle would automatically populate these options with HTTPS_PROXY and NO_PROXY environment variables. However, when providing a 'proxy' request option, default values will be overriden and it is required to explicitly provide the 'no' value if needed. More info: http://docs.guzzlephp.org/en/stable/request-options.html#proxy This commit will add support for a new config 'proxyexclude', which takes a list of host names to be excluded. It will also provide 'proxy' request option as an array instead of a string to Guzzle, and populate 'http' and 'https' URI schemes with proxy URI, and 'no' with 'proxyexclude' list. Also, if no 'proxy' is configured, it will leave out 'proxy' request option, so it won't override Guzzle default values. Sample config file includes a hint on how to explicitly sync 'proxyexclude' with NO_PROXY, and a note about default values. Signed-off-by: Mohammed Abdellatif <m.latief@gmail.com>	6 years ago

1 2

68 Commits (ba94de2510b3858f10d60f0230a58b1252346372)