869 Commits (d751fedffb110aca956e9f786cd9ecdafdfa6ecd)

Author	SHA1	Message	Date
Nextcloud-PR-Bot	510be67e94	Update psalm baseline ... Signed-off-by: GitHub <noreply@github.com>	5 years ago
Vincent Petry	5a8f15e167	Update psalm baseline to remove obsolete stuff ... As seen in CI static checks, some blocks in the baseline were not needed any more. This will fix static checks in CI. Signed-off-by: Vincent Petry <vincent@nextcloud.com>	5 years ago
Nextcloud-PR-Bot	f6969d9878	Update psalm baseline ... Signed-off-by: GitHub <noreply@github.com>	5 years ago
Morris Jobke	63dc2df68d	Update baseline.xml ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
Christoph Wurst	8b64e92b92	Bump doctrine/dbal from 2.12.0 to 3.0.0 ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Nextcloud-PR-Bot	b3cdb2e23a	Update psalm baseline ... Signed-off-by: GitHub <noreply@github.com>	5 years ago
Nextcloud-PR-Bot	f653e933f4	Update psalm baseline ... Signed-off-by: GitHub <noreply@github.com>	5 years ago
Roeland Jago Douma	81423a2a2f	Fix expceted psalm-ocp.xml file ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Christoph Wurst	9ce3ea3368	Update license headers ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Roeland Jago Douma	fe65f8facf	Add dedicated baseline for OCP ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Daniel Calviño Sánchez	28f2d0ec7a	Make integration tests work with both PHP 7.3 and 7.4 ... The "Trashbin" and "WebDav" traits were using each other in a circular dependency ("WebDav" -> "Sharing" -> "Provisioning" -> "BasicStructure" -> "Trashbin" -> "WebDav"). In PHP 7.3 this worked fine, but in PHP 7.4 the fatal error "Trait 'WebDav' not found in .../Trashbin.php" was thrown. To solve this now the "TrashBin" trait no longer explicitly uses "WebDav". However, due to this change, the class using "TrashBin" is now expected to also use "WebDav". As the "Trashbin" trait was not needed by most contexts using the "BasicStructure" trait "Trashbin" was removed from it and added only to those contexts that actually need it. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>	5 years ago
Nextcloud-PR-Bot	4ceeaccdd9	Update psalm baseline ... Signed-off-by: GitHub <noreply@github.com>	5 years ago
dependabot-preview[bot]	9e5f167d9a	Bump node-sass from 4.14.1 to 5.0.0 in /build ... Bumps [node-sass](https://github.com/sass/node-sass) from 4.14.1 to 5.0.0. - [Release notes](https://github.com/sass/node-sass/releases) - [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md) - [Commits](https://github.com/sass/node-sass/compare/v4.14.1...v5.0.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>	5 years ago
Christoph Wurst	73c7d0dc81	Bump icewind/streams from 0.7.1 to 0.7.2 ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Julius Härtl	c7a320d880	jsunit: Run jsunit with chromium/puppeteer on github actions ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	5 years ago
Christoph Wurst	3570ca82cf	Update the Psalm baseline ... Some issues were resolved, hence every CI run shows this diff. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Christoph Wurst	d89a75be0b	Update all license headers for Nextcloud 21 ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Nextcloud-PR-Bot	815b39f5bc	Update psalm baseline ... Signed-off-by: GitHub <noreply@github.com>	5 years ago
dependabot-preview[bot]	78079839be	[Security] Bump ini from 1.3.5 to 1.3.7 in /build ... Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.7. **This update includes a security fix.** - [Release notes](https://github.com/isaacs/ini/releases) - [Commits](https://github.com/isaacs/ini/compare/v1.3.5...v1.3.7) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>	5 years ago
Julius Härtl	b8d2a00b74	Update psalm baseline ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	5 years ago
Nextcloud-PR-Bot	59f9e7f340	Update psalm baseline ... Signed-off-by: GitHub <noreply@github.com>	5 years ago
Julius Härtl	b7326046c6	Update psalm baseline ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	5 years ago
Roeland Jago Douma	a9ee98e070	Update psalm baseline ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Joas Schilling	d0750df20c	Unit tests for searching by phone number ... Signed-off-by: Joas Schilling <coding@schilljs.com>	5 years ago
Joas Schilling	46b073d7ce	Add a config for default region of phone numbers ... Signed-off-by: Joas Schilling <coding@schilljs.com>	5 years ago
Joas Schilling	689e3a502d	Add an integration test for the phone search API ... Signed-off-by: Joas Schilling <coding@schilljs.com>	5 years ago
Daniel Calviño Sánchez	b4b3276a5b	Add integration tests for getting guest avatars ... Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>	5 years ago
Daniel Calviño Sánchez	1552add4ca	Add integration tests for resized user avatars ... Even on solid color images the resizing can cause some small artifacts that slightly modify the color of certain pixels. Due to this now the color comparison is no longer strict but fuzzy. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>	5 years ago
Daniel Calviño Sánchez	2cc22a06b4	Add integration tests for user avatars ... Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>	5 years ago
Daniel Calviño Sánchez	184742e6ff	Make possible to set body in requesttoken requests in integration tests ... "sendingAToWithRequesttoken" needs to be used to test some non OCS endpoints which require the request token to be sent in the request. Now it is possible to specify the body (or, rather, additional contents beside the cookies and the request token) for those requests, as it will be needed for example to upload an avatar. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>	5 years ago
Daniel Calviño Sánchez	b553b43b68	Make possible to send requests as anonymous users in integration tests ... Until now requests always had "auth" headers either for an admin or a regular user, depending on the value of "currentUser". Now, if "currentUser" starts by "anonymous" no "auth" header is sent, which makes possible to also test requests with users not logged in. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>	5 years ago
Julius Härtl	a1a4fa2ac2	Always install composer v2 ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	5 years ago
Nextcloud-PR-Bot	3c606cbec3	Update psalm baseline ... Signed-off-by: GitHub <noreply@github.com>	5 years ago
Morris Jobke	40ebe24960	Update psalm-baseline.xml ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
Morris Jobke	d87705a894	Allow subscription to indicate that a userlimit is reached ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
Robin Appelman	ef016f71c3	cleanup after autoloader generation ... Signed-off-by: Robin Appelman <robin@icewind.nl>	5 years ago
Nextcloud-PR-Bot	5427acec98	Update psalm baseline ... Signed-off-by: GitHub <noreply@github.com>	5 years ago
Nextcloud-PR-Bot	f94741ddee	Update psalm baseline ... Signed-off-by: GitHub <noreply@github.com>	5 years ago
Robin Appelman	3e2e694ea9	dont use system composer for autoload checker ... this ensures that the same composer version is used by everyone (and ci) Signed-off-by: Robin Appelman <robin@icewind.nl>	5 years ago
Nextcloud-PR-Bot	fda21b35c4	Update psalm baseline ... Signed-off-by: GitHub <noreply@github.com>	5 years ago
Lukas Reschke	47ac8e0028	Add Psalm Taint Flow Analysis ... This adds the Psalm Security Analysis, as described at https://psalm.dev/docs/security_analysis/ It also adds a plugin for adding input into AppFramework. The results can be viewed in the GitHub Security tab at https://github.com/nextcloud/server/security/code-scanning **Q&A:** Q: Why do you not use the shipped Psalm version? A: I do a lot of changes to the Psalm Taint behaviour. Using released versions is not gonna get us the results we want. Q: How do I improve false positives? A: https://psalm.dev/docs/security_analysis/avoiding_false_positives/ Q: How do I add custom sources? A: https://psalm.dev/docs/security_analysis/custom_taint_sources/ Q: We should run this on apps! A: Yes. Q: What will change in Psalm? A: Quite some of the PHP core functions are not yet marked to propagate the taint. This leads to results where the taint flow is lost. That's something that I am currently working on. Q: Why is the plugin MIT licensed? A: Because its the first of its kind (based on GitHub Code Search) and I want other people to copy it if they want to. Security is for all :) Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	5 years ago
dependabot-preview[bot]	774350c610	Bump vimeo/psalm from 4.1.1 to 4.2.0 ... Bumps [vimeo/psalm](https://github.com/vimeo/psalm) from 4.1.1 to 4.2.0. - [Release notes](https://github.com/vimeo/psalm/releases) - [Commits](https://github.com/vimeo/psalm/compare/4.1.1...4.2.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Nextcloud-PR-Bot	c4e8c1bdcd	Update psalm baseline ... Signed-off-by: GitHub <noreply@github.com>	5 years ago
Roeland Jago Douma	9163790b7c	Set frame-ancestors to none if none are filled ... frame-ancestors doesn't fall back to default-src. So when we apply a very restricted CSP we should make sure to set it to 'none' and not leave it empty. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Nextcloud-PR-Bot	e93a76962c	Update psalm baseline ... Signed-off-by: GitHub <noreply@github.com>	5 years ago
Joas Schilling	4f26eee609	Update psalm baseline ... Signed-off-by: Joas Schilling <coding@schilljs.com>	5 years ago
Daniel Calviño Sánchez	28c57004dd	Add integration tests for creating shares with default expiration dates ... Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>	5 years ago
Daniel Calviño Sánchez	4f5271acf9	Reset app configs by deleting the values instead of setting the defaults ... This avoids the need to keep the default values in the integration tests in sync with the code, and also makes possible to reset values with "dynamic" defaults (defaults that depend on other values). Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>	5 years ago
Nextcloud-PR-Bot	aa967d798c	Update psalm baseline ... Signed-off-by: GitHub <noreply@github.com>	5 years ago
Nextcloud-PR-Bot	05cd789e9d	Update psalm baseline ... Signed-off-by: GitHub <noreply@github.com>	5 years ago