18623 Commits (f3513f3fe4dc52143798e60deb4367f2c829029f)

Author	SHA1	Message	Date
Tigran Mkrtchyan	f3513f3fe4	files: Local#writeStream should use it's own file_put_contents ... The OC\Files\Storage\Local#writeStream use system provided file_put_contents. However, it overrides file_put_contents, thus expects that the default behaviour can be different. Use Local#file_put_contents in writeStream to benefit from class specific functionality. Signed-off-by: Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>	5 years ago
Nextcloud bot	eab710c2fd	[tx-robot] updated from transifex	5 years ago
Nextcloud bot	e41e2fe003	[tx-robot] updated from transifex	5 years ago
Nextcloud bot	9a6569d4f2	[tx-robot] updated from transifex	5 years ago
Morris Jobke	5cc348ae72	Fix typo ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
Roeland Jago Douma	48b4b83b5a	Remember me is not an app_password ... While technically they are stored the same. This session variable is used to indicate that a user is using an app password to authenticate. Like from a client. Or when having it generated automatically. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Roeland Jago Douma	858f623081	Generate a new session id if the decrypting the session data fails ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Vincent Petry	9b3361ce87	Don't log params of imagecreatefromstring ... To prevent flooding the log with actual image data. Signed-off-by: Vincent Petry <vincent@nextcloud.com>	5 years ago
Nextcloud bot	3f88dbd259	[tx-robot] updated from transifex	5 years ago
Christoph Wurst	cc92d5a293	Allow unified search results to have attributes ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Roeland Jago Douma	c9cd633665	Fix the download of multiple files from the webUI ... needed a setupFS call Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Julius Härtl	04d67d558e	Also handle legacy cipher support when encryption is disabled but an old master key is present ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	5 years ago
Christoph Wurst	244c53dea1	Replace abandoned log normalizer with our fork ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Roeland Jago Douma	3d315ec64f	Fix vsprint parameter ... %2\$; is not valid. On php7 this is just ignored but on php8 it gives an error. %2\$s; works. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Nextcloud bot	0dcc227a6b	[tx-robot] updated from transifex	5 years ago
Roeland Jago Douma	04c037ebfd	[3rdparty] Migrate to Opis/Closure ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Robin Appelman	aef1cdba03	code style and dispatchTyped ... Signed-off-by: Robin Appelman <robin@icewind.nl>	5 years ago
Morris Jobke	c0a05c0412	Add notification for user limit ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
Morris Jobke	d87705a894	Allow subscription to indicate that a userlimit is reached ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
Vincent Petry	a50bcdabcc	Prevent log_query to mess up regular execution flow ... When the "log_query" debug config parameter is set, SQL queries are logged. However, if an error occurs when converting the values to string, it will abort the request. This fix catches the error and continues instead. Also added handler for DateTime value which is already known to cause aborts here. Signed-off-by: Vincent Petry <vincent@nextcloud.com>	5 years ago
aler9	ac0c7a8fe0	Fix file size computation on 32bit platforms ... Signed-off-by: aler9 <46489434+aler9@users.noreply.github.com>	5 years ago
Nextcloud bot	7ceb98f63b	[tx-robot] updated from transifex	5 years ago
Morris Jobke	83a75c670b	Replace static call to Share::unshare with ShareManager->deleteShare in tests ... And then cleanup all the code that is dead then... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
Morris Jobke	6564a95160	Remove now unused methods in Share.php due to the reduced code complexity in Share::getItems ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
Morris Jobke	10e5ae5e18	Remove unused method Share Helper::generateTarget ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
Morris Jobke	a125d8aaa1	Reduce code complexity in Share::getItems by tracing all remaining callers ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
Morris Jobke	596df8fc6f	Remove unused Share::getItemSharedWithBySource() ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
Christoph Wurst	fd649afb1f	Remove the deprecated update.php ... * It was documented as deprecated. * The app code checker warned about it * It's been three years Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Robin Appelman	7956cef622	rebuild autoloader scripts with 2.0.7 ... Signed-off-by: Robin Appelman <robin@icewind.nl>	5 years ago
Robin Appelman	88f35d52d2	rename cache event to follow new naming standards ... Signed-off-by: Robin Appelman <robin@icewind.nl>	5 years ago
Robin Appelman	23fb497ff5	extend cache events ... - adds cache remove event - expose storage id in event - emit events during cache move Signed-off-by: Robin Appelman <robin@icewind.nl>	5 years ago
Christoph Wurst	7dd39a91ee	Remove dead method \OC\Updater::checkAppUpgrade ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Arthur Schiwon	9cfa8a6c44	send expected format of cloud id ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	5 years ago
Robin Appelman	9d4848e863	use in objectstore copy ... Signed-off-by: Robin Appelman <robin@icewind.nl>	5 years ago
Christoph Wurst	2526c5e042	Fix the config key on the sharing expire checkbox ... We don't use `shareapi_internal_enforce_expire_date` anywhere. `shareapi_enforce_internal_expire_date` is the one we want. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Arthur Schiwon	16a78f535a	set the display name of federated sharees from addressbook ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	5 years ago
Roeland Jago Douma	82d3f50b78	Fix the OCP\BackgroundJob\Job to make it compatible with its interface ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Christoph Wurst	decc5c844b	Fix reverse registration and missing comments tab ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Julius Härtl	d9708ebece	Add proper alias for internal router class ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	5 years ago
Morris Jobke	f4c1512bb7	Fix typo in @deprecated PHPDoc tag ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
Morris Jobke	9bf76d2bad	Streamline user creation and deletion events ... CreateUserEvent was the only one that didn't matched the naming scheme of BeforePASTTENSEEvent and PASTTENSEEvent. The event wasn't used at all so this just removes it again as there is BeforeUserCreatedEvent that is also available since 18. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
Lukas Reschke	a5d4d3d4cc	Add IRequest taint sources ... Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	5 years ago
Lukas Reschke	d25ca1976b	Mark getAppPath as specialized taint ... Should remove some false positives. https://psalm.dev/docs/security_analysis/avoiding_false_positives/ Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	5 years ago
Lukas Reschke	98ddfdd1e8	Mark cleanAppId as sanitizer for include ... Should remove a bunch of false positive code scanning results. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	5 years ago
Morris Jobke	e606c0eef4	Allow View to be used via DI ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
Morris Jobke	5be18215fb	Auto-wire as much as possible in the encryption app ... Also cleans up only non-classname services in the server container Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
Lukas Reschke	47ac8e0028	Add Psalm Taint Flow Analysis ... This adds the Psalm Security Analysis, as described at https://psalm.dev/docs/security_analysis/ It also adds a plugin for adding input into AppFramework. The results can be viewed in the GitHub Security tab at https://github.com/nextcloud/server/security/code-scanning **Q&A:** Q: Why do you not use the shipped Psalm version? A: I do a lot of changes to the Psalm Taint behaviour. Using released versions is not gonna get us the results we want. Q: How do I improve false positives? A: https://psalm.dev/docs/security_analysis/avoiding_false_positives/ Q: How do I add custom sources? A: https://psalm.dev/docs/security_analysis/custom_taint_sources/ Q: We should run this on apps! A: Yes. Q: What will change in Psalm? A: Quite some of the PHP core functions are not yet marked to propagate the taint. This leads to results where the taint flow is lost. That's something that I am currently working on. Q: Why is the plugin MIT licensed? A: Because its the first of its kind (based on GitHub Code Search) and I want other people to copy it if they want to. Security is for all :) Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	5 years ago
Carlos Ferreira	a42eb05a35	Simple typo in comments	5 years ago
Roeland Jago Douma	b71803802c	Harden EncryptionLegacyCipher a bit ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Roeland Jago Douma	1e111b2ad2	Fix DataResponse typehints ... We use this already in several places where we just pass strings or numbers. This all works because we just convert it to a json response in the end. So better to have the typehints reflect this. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago