5653 Commits (ebfbe99652c88574bf8fdb1de830df5e694cfda9)

Author	SHA1	Message	Date
provokateurin	ebfbe99652	fix(files): Create non-existent parents of mountpoints ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Joas Schilling	e1caa198e3	ci: Skip flaky test on PHP 8.3 ... Signed-off-by: Joas Schilling <coding@schilljs.com>	1 year ago
Ferdinand Thiessen	b9cc7bcec7	fix: `FilenameValidator::isForbidden` should only check forbidden files ... And not forbidden basenames as this is used for different purposes. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Robin Appelman	20dbb6c7e8	feat: add negative compare-and-delete to imemcache ... Signed-off-by: Robin Appelman <robin@icewind.nl>	1 year ago
Ferdinand Thiessen	2ec68b1eb9	refactor(Log): Use new in initializer instead of constructor body ... PHP 8.1 allows us to now move the `new` into the initializer, this makes the code a bit nicer (and 3 lines shorter). Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Christoph Wurst	5100e3152d	feat(auth): Clean-up unused auth tokens and wipe tokens ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	1 year ago
Ferdinand Thiessen	2916e5df7e	feat: Provide CSP nonce as `<meta>` element ... This way we use the CSP nonce for dynamically loaded scripts. Important to notice: The CSP nonce must NOT be injected in `content` as this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors). Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Ferdinand Thiessen	009761be58	test: Adjust tests for CSP nonce ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Côme Chilliet	1cfc25d08c	fix(tests): Adapt tests to change of DefaultShareProvider constructor ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Ferdinand Thiessen	0563757ea4	fix(SetupCheck): Properly check public access to data directory ... When checking for public (web) access to the data directory the status is not enough as you might have a webserver that forwards to e.g. a login page. So instead check that the content of the file matches. For this the `.ncdata` file (renamed from `.ocdata`¹) has minimal text content to allow checking. ¹The file was renamed from the legacy `.ocdata`, there is a repair step to remove the old one. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Christoph Wurst	2b38d6ae7e	fix(session): Log when session_* calls are slow ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	1 year ago
skjnldsv	db28aa8cd1	fix(files_sharing): show proper share not found error message ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	1 year ago
Jérôme Herbinet	c221090c86	fix: unify bundle naming ... Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com> Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	1 year ago
Robin Appelman	9af6184af6	chore: delete repair step for 8y old oc_mounts issue ... Signed-off-by: Robin Appelman <robin@icewind.nl>	1 year ago
Julius Härtl	a6d421e767	chore: Remove deprecated legacy search backend ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	1 year ago
Joas Schilling	710a69b4b5	feat(log): Allow to combine log.conditions to only log (app&user) ... Signed-off-by: Joas Schilling <coding@schilljs.com>	1 year ago
Maxence Lange	ad490c963b	feat(migration-attributes): tests ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	1 year ago
provokateurin	9d1705259c	fix(AppFramework): Allow requests with OCS-APIRequest header to pass CSRF checks ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Marcel Klehr	799ee8fd51	feat(TaskProcessing): Implement enums and default values ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	1 year ago
SebastianKrupinski	fc0b694d37	feat: mail provider backend ... Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>	1 year ago
Robin Appelman	16c184e2cb	fix: cast to bigint on postgresql ... Signed-off-by: Robin Appelman <robin@icewind.nl>	1 year ago
Louis Chemineau	dff8815449	feat(users): Add support for admin delegation for users and groups management ... Signed-off-by: Louis Chemineau <louis@chmn.me>	1 year ago
Julien Veyssier	fffc784769	feat(taskprocessing): add support for webhooks (http or AppAPI) in the task processing API ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	1 year ago
Ferdinand Thiessen	9716b0d735	refactor: Migrate some legacy and core functions to `IFilenameValidator` ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Joas Schilling	047479ccf9	feat(security): Add public API to allow validating IP Ranges and checking for "in range" ... Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	1 year ago
Benjamin Gaussorgues	202e5b1e95	feat(security): restrict admin actions to IP ranges ... Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	1 year ago
Joas Schilling	f6238d35bd	fix(test): Make the test less flaky ... Signed-off-by: Joas Schilling <coding@schilljs.com>	1 year ago
Joas Schilling	eeb6ddb176	fix(db): Deprecate `IExpressionBuilder::or()` and `IExpressionBuilder::and()` without parameters ... Signed-off-by: Joas Schilling <coding@schilljs.com>	1 year ago
Joas Schilling	829f2b9bc7	fix(db): Promote the use of `getDatabaseProvider` to reduce the impage of removed upstream platforms ... Signed-off-by: Joas Schilling <coding@schilljs.com>	1 year ago
Joas Schilling	a4c1d7291f	fix(db): Use `createSchemaManager()` method as `getSchemaManager()` is deprecated ... Signed-off-by: Joas Schilling <coding@schilljs.com>	1 year ago
provokateurin	e5dcdfb9e0	feat(Security): Warn about using annotations instead of attributes ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Robin Appelman	c5b687271b	fix: make batch propagator work with sharding restrictions ... Signed-off-by: Robin Appelman <robin@icewind.nl>	2 years ago
Robin Appelman	0931492ff0	fix: make usermountcache compatible with sharding ... Signed-off-by: Robin Appelman <robin@icewind.nl>	2 years ago
Julien Veyssier	d37dd4b9a9	feat(settings/admin/ai): fix tests ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	2 years ago
Marcel Klehr	969cc52851	fix(TaskProcessing): Run cs:fix ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	2 years ago
Marcel Klehr	61ebfad724	fix(TaskProcessing): fix tests ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	2 years ago
Marcel Klehr	f1bb43dd55	test(TaskProcessing): Add test for setTaskResult with fileIds ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	2 years ago
Joas Schilling	693a81bfa3	fix(mail): Fix big logos in mail templates for Outlook ... Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
Ferdinand Thiessen	322b3946d9	fix(dav): Verify target path in `setName` instead of source path ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
Ferdinand Thiessen	f4ede27cdb	refactor: Remove deprecated `Util` function for filename validation to `FilenameValidator` ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
Ferdinand Thiessen	69341e4306	refactor: Migrate filename validation logic from `Storage` to `FilenameValidator` ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
Richard Steinmetz	e42bceac9f	feat: hide caldav server settings if no app uses the caldav backend ... Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>	2 years ago
Robin Appelman	9de6190ec4	feat: allow running QueryBuilder queries on different connections ... Signed-off-by: Robin Appelman <robin@icewind.nl>	2 years ago
Ferdinand Thiessen	bdbeabafa7	feat: Add `forbidden_filename_basenames` config option ... This allows to configure forbidden filenames (the full filename like `.htaccess`) and also forbidden basenames like `com0` where `com0`, `com0.txt` and `com0.tar.gz` will match. We need this as only using basenames was too restrictive and will cause problems on some systems when updating. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
skjnldsv	967b3848e0	fix(files_sharing): phpunit & openapi fixes ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	2 years ago
Ferdinand Thiessen	cf935e33ae	fix: `OCP\Files\Node\Folder::search` was not setting the owner ... The owner was not set on the file info causing e.g. webdav searches to never return the known owner. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
Ferdinand Thiessen	46f1efac41	feat: Add `IFilenameValidator` to have one consistent place for filename validation ... Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
Christopher Ng	48b69c53dc	test: Test hash validation ... Signed-off-by: Christopher Ng <chrng8@gmail.com>	2 years ago
Joas Schilling	a1d3b5f1a3	fix(tests): Remove output when running tests ... Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
Hamza Mahjoubi	a9774741e8	Feat: Allow users to select another user as their out-of-office replacement ... Signed-off-by: Hamza Mahjoubi <hamzamahjoubi221@gmail.com>	2 years ago