2785 Commits (bb02488cc2b25d9dbf0dde536e24ffa2d6a04ff7)

Author	SHA1	Message	Date
Jenkins for ownCloud	dda9525c4b	[tx-robot] updated from transifex	10 years ago
Lukas Reschke	4b293dffe5	Use \OCP\Util::sanitizeHTML instead of \OC_Util::sanitizeHTML	10 years ago
Scrutinizer Auto-Fixer	453e1bf66e	Scrutinizer Auto-Fixes ... This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com	10 years ago
Patrick Robertson	96a83a783f	Add 'my groups' anchor to the personal page sidebar	10 years ago
Jenkins for ownCloud	f0b1ba713d	[tx-robot] updated from transifex	10 years ago
Morris Jobke	e6d4496fc2	Remove unused setActiveNavigationEntry of OC_App - it's also in OCP\App	10 years ago
Roeland Jago Douma	8c9a3ccefc	Do not request an avatar if there is none	10 years ago
Roeland Jago Douma	a619629ac0	Only try to load avatars in the user list if there is any	10 years ago
Roeland Jago Douma	50d862e5d1	[Avatars] JS should not load same avatar twice ... Old code first dit an ajax request to the avatar. Then a new image object with the same src was created and since we do not cache avatars yet :( this resulted in 2 sequential requests to the exact same URL Now if you set the displayname it will first set the placeholder and then load the avatar in the background. Only once this time!	10 years ago
Jenkins for ownCloud	5c178a2719	[tx-robot] updated from transifex	10 years ago
Thomas Müller	eebe2b9c23	User IUser::getEMailAddress() all over the place	10 years ago
Morris Jobke	0a6db3ada6	Remove OC_Config from app management template ... * add unit test for this case	10 years ago
Jenkins for ownCloud	4f4b91a9ec	[tx-robot] updated from transifex	10 years ago
Lukas Reschke	4971015544	Add code integrity check ... This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release 😉). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF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\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates **Note:** The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following:  As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.	10 years ago
Jenkins for ownCloud	8421a43df1	[tx-robot] updated from transifex	10 years ago
Lukas Reschke	3ea654d2d4	Use .text instead of .html ... Makes some static source code analyzers happier.	10 years ago
Jenkins for ownCloud	5a9b892b2e	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	d305412a35	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	39fb320bae	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	dd18ea611b	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	6e60c0f0c4	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	cb69e6c201	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	56e05a90af	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	2321cc4854	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	eb42340fa3	[tx-robot] updated from transifex	10 years ago
Roeland Jago Douma	0265bcfdae	Moved changedisplayname to usercontroller ... Killed the old static route to change a users display name and moved it to a properly testable controller.	10 years ago
Jenkins for ownCloud	764504de19	[tx-robot] updated from transifex	10 years ago
Björn Schießle	97c60fd217	change 'cronstatus' to 'status' so that it can be used in other apps too	10 years ago
Jenkins for ownCloud	c10be07c1b	[tx-robot] updated from transifex	10 years ago
Jan-Christoph Borchardt	9671103121	clarify log level setting design, fix #20514	10 years ago
Jenkins for ownCloud	5dd59b4bd2	[tx-robot] updated from transifex	10 years ago
Jan-Christoph Borchardt	83c177fc1b	move font back from Light to Regular for body text on normal-res screens, fix #18954	10 years ago
Jan-Christoph Borchardt	e9691893b5	use new checkbox style for Apps mgmt settings	10 years ago
Thomas Müller	267d30d4f6	Fix #18072	10 years ago
Jenkins for ownCloud	113f9f80f3	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	f8637b6082	[tx-robot] updated from transifex	10 years ago
Robin McCorkell	6959d5ca22	Properly detect setup check messages set in the HTML template	10 years ago
Morris Jobke	fa24d92eea	Show the language code in personal settings for unknown languages ... Steps to reproduce: * having an unknown language set in oc_preferences * browse the personal settings * only get listed the first letter of this language in the language chooser	10 years ago
Jenkins for ownCloud	f2b19333b9	[tx-robot] updated from transifex	10 years ago
Morris Jobke	cc9695ea41	Fix typo in variable name ... * introduced with #20135 - c6f6a8758b Fixes following error meessage: {"reqId":"GliKwPFSIVn8GC2KNIHY","remoteAddr":"::1","app":"PHP","message":"Undefined variable: subAdmins at master\/settings\/users.php#76","level":0,"time":"2015-11-04T08:38:53+00:00","method":"GET","url":"\/master\/index.php\/settings\/users"} {"reqId":"GliKwPFSIVn8GC2KNIHY","remoteAddr":"::1","app":"PHP","message":"Invalid argument supplied for foreach() at master\/settings\/users.php#76","level":0,"time":"2015-11-04T08:38:53+00:00","method":"GET","url":"\/master\/index.php\/settings\/users"}	10 years ago
Morris Jobke	18f0bafd88	fix subadmin user count for empty groups	10 years ago
Jenkins for ownCloud	7fe047425f	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	82f3590fd0	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	2afc14e195	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	2374a0df5d	[tx-robot] updated from transifex	10 years ago
Hendrik Leppelsack	7e2fe08778	new checkbox style in app settings	10 years ago
Jenkins for ownCloud	d7ed353814	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	91b2cdc62b	[tx-robot] updated from transifex	10 years ago
Vincent Petry	781bca2437	Fix everyone count for subadmins ... Also moved the logic to the UsersController	10 years ago
Hendrik Leppelsack	d2f0055af4	apply new checkbox style in users settings	10 years ago