248 Commits (d92bf388b1c553ecd6bfb2a7400b990dcafe9c54)

Author	SHA1	Message	Date
Daniel Kesselberg	af6de04e9e	style: update codestyle for coding-standard 1.2.3 ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	1 year ago
Ferdinand Thiessen	2916e5df7e	feat: Provide CSP nonce as `<meta>` element ... This way we use the CSP nonce for dynamically loaded scripts. Important to notice: The CSP nonce must NOT be injected in `content` as this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors). Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Richard Steinmetz	b37fb43a32	feat: let users configure their first day of week ... Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>	1 year ago
Ferdinand Thiessen	a229723b8c	feat: Add new forbidden filename options to Capabilities ... Allow clients to access the new filename validation options and make frontend name validation possible. Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Kate <26026535+provokateurin@users.noreply.github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
Arthur Schiwon	f6d6efef3a	refactor(Token): introduce scope constants ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Arthur Schiwon	340939e688	fix(Session): avoid password confirmation on SSO ... SSO backends like SAML and OIDC tried a trick to suppress password confirmations as they are not possible by design. At least for SAML it was not reliable when existing user backends where used as user repositories. Now we are setting a special scope with the token, and also make sure that the scope is taken over when tokens are regenerated. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Andy Scherzinger	dae7c159f7	chore: Add SPDX header ... Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Ferdinand Thiessen	dd4901d689	feat: Add `forbidden_filename_characters` to JSConfig for use in frontend libraries ... Add the filename restrictions to our JS config so we can create a common frontend library function to check filename validity (de-duplicate code). Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
Côme Chilliet	ec5133b739	fix: Apply new coding standard to all files ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Ferdinand Thiessen	03dbbc90be	fix(JSRecourceLocator): Add missing slash after server root ... The `OC::$SERVERROOT` is always returned without a trailing slash, so we need to add a slash between server root and apps directory. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
Ferdinand Thiessen	51ea3de8a7	fix(JSResourceLocator): Consider configured app roots for files ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
Louis Chemineau	a39b3a3d84	Add global accessibility switch ... Signed-off-by: Louis Chemineau <louis@chmn.me>	2 years ago
Joas Schilling	aa5f037af7	chore: apply changes from Nextcloud coding standards 1.1.1 ... Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	2 years ago
Akhil	5e20c3e7b9	Add custom apps translation scripts and image path for consistency ... Signed-off-by: Akhil <akhil@e.email>	2 years ago
Andrew Summers	6b09a79227	Refactor `OC\Server::getShareManager` ... Signed-off-by: Andrew Summers <18727110+summersab@users.noreply.github.com>	2 years ago
Faraz Samapoor	e7cc7653b8	Refactors "strpos" calls in lib/private to improve code readability. ... Signed-off-by: Faraz Samapoor <fsamapoor@gmail.com>	3 years ago
Julius Härtl	0ebb00d01d	fix: Do not attempt to use l10n files as sources for combined js files ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Ferdinand Thiessen	31c01fa3da	fix(JSResourceLocator): Handle missing translations silently ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	3 years ago
Ferdinand Thiessen	a3595f73ac	fix(OC/Template): Allow `.mjs` files within custom app paths ... If apps are installed in non standard app paths, we need to check `$app_path/$script` instead of only doing so for translations. Without this it would fallback to `.js` extension even if a `.mjs` file exists. Also tried make the code more selfe explaining. Signed-off-by: Ferdinand Thiessen <rpm@fthiessen.de>	3 years ago
Ferdinand Thiessen	00e041b907	feat(template): Allow `JSResourceLocator` to find ES6 scripts ... Enable module js (ES6) support on the `JSResourceLocator`. This changes `JSResourceLocator` to look for `.mjs` files first to allow applications to provide a fallback `.js` for older Nextcloud versions. Signed-off-by: Ferdinand Thiessen <rpm@fthiessen.de>	3 years ago
Ferdinand Thiessen	dbb1fa1273	fix(OC/Template): Remove usage of deprecated functions in `JSResourceLocator` ... Move from `\OC_App::getAppPath` to `IAppManager::getAppPath`. Signed-off-by: Ferdinand Thiessen <rpm@fthiessen.de>	3 years ago
Julius Härtl	4cebfa95e6	fix: Fix loading styles from core/css/ ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Côme Chilliet	f5c361cf44	composer run cs:fix ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Thomas Citharel	34ce53355a	Catch NotFoundException as well in JSCombiner ... Follow-up to #35576 Signed-off-by: Thomas Citharel <tcit@tcit.fr>	3 years ago
Julius Härtl	4bcaeb6c2c	Drop 3rdparty root since it is unused and adjust tests ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Julius Härtl	3e5838198c	Use single resource locator instance ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
John Molakvoæ	2d98cd1daf	Add config and fix selenium ... Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>	3 years ago
Carl Schwan	54031e370a	Fix various other small psalm issues ... Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Carl Schwan	329687ecff	Make it possible to load theme/<themename>/dist ... This fix a regression with the theming api following the change in webpack bundling introduced in 24 Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Carl Schwan	de168b38e9	Make it possible to load theme/<themename>/dist ... This fix a regression with the theming api following the change in webpack bundling introduced in 24 Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Christopher Ng	7a13388fe9	Hide deprecated projects in sharing tab by default ... Signed-off-by: Christopher Ng <chrng8@gmail.com>	3 years ago
Ferdinand Thiessen	1da424595f	Feature: Add and expose frontend loglevel ... This adds a new config variable `loglevel_frontend`, allowing to configure the logging level of the browser part as requested in nextcloud/nextcloud-logger#141 If not configured the `loglevel` is used as the fallback. Signed-off-by: Ferdinand Thiessen <rpm@fthiessen.de>	4 years ago
Joas Schilling	f9efc410fa	Restore old behaviour of sending flase for not found apps ... Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
Joas Schilling	eb1a69d627	Improve JSConfigHelper code quality a bit ... Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
John Molakvoæ	9a9409e315	Remove SCSSCacher ... Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>	4 years ago
John Molakvoæ	3c6253f965	Remove old legacy SvgController and IconsCacher ... Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>	4 years ago
Carl Schwan	69b36fc2c5	Don't inject Bruteforce capability info in the webui ... This capability do DB access and as far I know is not used by the webui. This remove one DB query for each page load. Signed-off-by: Carl Schwan <carl@carlschwan.eu>	4 years ago
Côme Chilliet	1809386862	Fix codestyle ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Côme Chilliet	6be7aa112f	Migrate from ILogger to LoggerInterface in lib/private ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Julius Härtl	e8cf1a8759	Avoid double-loading dist/core-main.js when apps have scripts named main ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	4 years ago
Julius Härtl	55fd974926	Remove shortFooter/longFooter to avoid unnecessary navigation loading ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	4 years ago
Louis Chemineau	6f62c17a95	Detect app's script higher up as some scripts were shadowed ... Signed-off-by: Louis Chemineau <louis@chmn.me>	4 years ago
Louis Chemineau	f8f09bff04	Restore some line in JSResourceLocator.php ... Signed-off-by: Louis Chemineau <louis@chmn.me>	4 years ago
John Molakvoæ (skjnldsv)	b664aad7ab	Move bundles to /dist ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	4 years ago
Carl Schwan	dfb569f097	Follow upstream security recommandation ... See https://scssphp.github.io/scssphp/docs/#security-considerations Signed-off-by: Carl Schwan <carl@carlschwan.eu>	4 years ago
MichaIng	9189bc21fb	Correct comment about OC_Defaults being used ... Signed-off-by: MichaIng <micha@dietpi.com>	4 years ago
Carl Schwan	df3d9107ef	Fix core depending on theming app ... This was introduced in 309354852f to fix a bug but I can't reproduce the bug after reverting this change. Ideally we would need to create an interface in OCP and cleanup OC_Defaults instead of depending on OC_Defaults. Signed-off-by: Carl Schwan <carl@carlschwan.eu>	4 years ago
Christopher Ng	309354852f	Profile backend ... Signed-off-by: Christopher Ng <chrng8@gmail.com>	4 years ago
Karel Hink	18cc6c11b5	Fix Lots of Error: file_exists(): open_basedir restriction in effect. in Log ... Signed-off-by: Karel Hink <info@karelhink.cz>	5 years ago
Julius Härtl	c0474ba364	Use product name in places where it is appropriate rather than the instance name ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	5 years ago