Merge pull request #30913 from nextcloud/dependabot/npm_and_yarn/stable23/webpack-cli-4.9.2

Bump webpack-cli from 4.9.1 to 4.9.2

Merge pull request #30911 from nextcloud/dependabot/npm_and_yarn/stable23/dompurify-2.3.5

Bump dompurify from 2.3.4 to 2.3.5

Bump dompurify from 2.3.4 to 2.3.5

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 2.3.4 to 2.3.5.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/2.3.4...2.3.5)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Bump webpack-cli from 4.9.1 to 4.9.2

Bumps [webpack-cli](https://github.com/webpack/webpack-cli) from 4.9.1 to 4.9.2.
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@4.9.1...webpack-cli@4.9.2)

---
updated-dependencies:
- dependency-name: webpack-cli
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #30840 from nextcloud/releases/23.0.1

Merge pull request #30814 from nextcloud/backport/30508/stable23

Fix psalm not running

The issue was that we were using psalm/phar instead of vimeo/psalm. This
caused issue with the custom psalm plugin in buildd/psalm.

This is using the opportunity to also update the psalm version from 3.8
to 3.17 and the php-cs-fixer too.

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

Merge pull request #30872 from nextcloud/backport/30844/stable23

Prevent merging on EOL branches

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Merge pull request #30847 from nextcloud/backport/30846/stable23

Fix php:cs

Signed-off-by: Louis Chemineau <louis@chmn.me>

23.0.1 Final

Merge pull request #30799 from nextcloud/dependabot/composer/build/integration/stable23/sabre/dav-4.3.1

Merge pull request #30740 from nextcloud/backport23

Merge pull request #30811 from nextcloud/backport/30795/stable23

Merge pull request #30773 from nextcloud/backport/30769/stable23

Fix accessing undefined offsets

Move this to inside the else clause of the count($matches)

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

Update sabre/dav requirement from 4.3.0 to 4.3.1 in /build/integration

Updates the requirements on [sabre/dav](https://github.com/sabre-io/dav) to permit the latest version.
- [Release notes](https://github.com/sabre-io/dav/releases)
- [Changelog](https://github.com/sabre-io/dav/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sabre-io/dav/compare/4.3.0...4.3.1)

---
updated-dependencies:
- dependency-name: sabre/dav
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #30765 from nextcloud/release/23.0.1rc3

Merge pull request #30782 from nextcloud/backport/29349/stable23

Add test for samba kerberos sso in ci

Signed-off-by: Robin Appelman <robin@icewind.nl>

update icewind/smb to 3.5.2

Signed-off-by: Robin Appelman <robin@icewind.nl>

update to release smb lib

Signed-off-by: Robin Appelman <robin@icewind.nl>

update icewind/smb to 3.5.1

Signed-off-by: Robin Appelman <robin@icewind.nl>

do not use deprecated query() method

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

add changes from Sebastian/dassIT and move default_realm to backend

- Sebastian added the switch depending on the preg_match result and with it
  the fall back to login credentials
- I turned default_realm to a backend option (was previously suggested as
  system config key)

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

add KerberosApacheAuth support to files_external

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Always call flush() as getAllKeys() is broken

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Merge pull request #30728 from nextcloud/backport/30614/stable23

Fix tests with email templates

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

Merge pull request #29798 from nextcloud/stable23-disk

Merge pull request #30759 from nextcloud/backport/30731/stable23

23.0.1 RC3

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Log bruteforce throttle and blocking

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #30753 from nextcloud/backport/30738/stable23

Merge pull request #30747 from nextcloud/backport/30615/stable23

Create block-merge-freeze.yml

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Update autoload and ClassLoader

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Improve installation pages

Signed-off-by: Christopher Ng <chrng8@gmail.com>
(cherry picked from commit 22768769c3f29f9952110f86a032e4bf3a4bf460)
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #30734 from nextcloud/backport/30470/stable23

[stable23] Hash job argument

[stable23] Increase email main buttons width for non-english languages

Manual backport of https://github.com/nextcloud/server/pull/30653

Add hashed attribute column for indexed job existence check

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Update Session.php

The http headers according to rfc 2616 is iso-8859-1. This patch fixes the behavior when non-ascii characters are present in the header.

Signed-off-by: Marek Wójtowicz <Marek.Wojtowicz@agh.edu.pl>

Merge pull request #30685 from nextcloud/backport/29923/stable23

[stable23] Fix users can't login external mount user entered credentials not set

Merge pull request #30722 from nextcloud/backport/30719/stable23

[stable23] Fix loading of the text app in public shared links

Fix loading of the text app in public shared links

Instead of doing the centering for the entire public content, only do it
for the preview. This is more safe.

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

Merge pull request #30678 from nextcloud/release/23.0.1rc2

23.0.1 RC2

Merge pull request #30684 from nextcloud/backport/30531/stable23

[stable23] Optimize FileSystemTags workflow for groupfolder

Merge pull request #30688 from nextcloud/backport/30499/stable23

[stable23] Remove inefficient fed share scanner

Merge pull request #30689 from nextcloud/backport/30645/stable23

[stable23] New Files internal link GET param to avoid opening the file

Merge pull request #30695 from nextcloud/backport/30631/stable23

[stable23] updateEncryptedVersion: cleanup on target if cache already got renamed

Merge pull request #30698 from nextcloud/backport/30655/stable23

[stable23] Improve layout for the public download page

Add non-breaking space in the file size

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

Improve layout for the public download page

This centers the content inside the pages, while also not hardcoded the
size of the footer.

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

updateEncryptedVersion: cleanup on target if cache already got renamed

When moving a file to trash with encryption enabled, the cache gets
moved before the actual file. According to @icewind1991 this is in order
to not break object storage.

When moving a file from an unencrypted storage (e.g. a collectives
storage) to the encrypted trashbin storage, this causes errors, see

This commit fixes it by doing `updateEncryptedVersion()` on the target
cache entry *if* the source cache entry doesn't exist anymore, but the
corresponding target cache entry does exist already.

Fixes: #26544
Signed-off-by: Jonas Meurer <jonas@freesources.org>

[files] new internal link GET param to avoid setting 'openfile' on redirect

Signed-off-by: Julien Veyssier <eneiluj@posteo.net>

Merge pull request #30672 from nextcloud/backport/stable23/30597

Remove inefficient fed share scanner

Remove scanAll which relies on the "shareinfo" endpoint that returns the
full cache tree.
The latter can become big for big shares and result in timeouts.
Furthermode, the full tree would be retrieved again for each and every
detected change which can become expensive quickly.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Merge pull request #30674 from nextcloud/backport/30275/stable23

files_external SMB: throw InvalidArgument when user is not set

Signed-off-by: Anderson Luiz Alves <alacn1@gmail.com>

Fix psalm issues

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

Add helper method in Wrapper

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

The storage is not static anymore

Don't call twice $cache->getId

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

Optimize FileSystemTags workflow for groupfolder

In https://github.com/nextcloud/server/pull/28774 we disabled the
caching for the groupfolder application since it worked due to the fact
that in groupfolders, getFileIds could be called with the same $cacheId
and path for actually different groupfolders.

This revert this change and instead add the folderId from the
groupFolder to the cacheId. This solve the issue of the uniqueness of
the cacheId inside GroupFolder. Downside is that we introduce
groupfolder specific implementation inside the server repo.

The seconf optimization is to not consider paths starting with
__groupfolders in executeCheck. This is due to the fact that files in
the groupfolder application call two times executeCheck one time with
the url __groupfolder/<folderId>/<path> and the other time with <path>.
The first time will always return an empty systemTags array while the
second call will return the correct system tags.

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

Merge pull request #30671 from nextcloud/backport/30363/stable23

[stable23] improve accessibility settings on mobile

23.0.1 RC2

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #30662 from nextcloud/backport/30530/stable23

[stable23] Fix wrong unified search link to folder

Merge pull request #30663 from nextcloud/backport/30568/stable23

[stable23] Fix primary key change in user_ldap migration

Add version of disabled apps when available

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix file picker not respecting hidden files settings

This will only respect the setting inside the file app. For other apps
we will either need to do an API call or add an input field with the
same idea to spare a blocking api call.

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
(cherry picked from commit 1fa58be1aa78ff6216b7a129925a7bb270ac9fe1)

Merge pull request #30659 from nextcloud/backport/29622/stable23

address 2nd review

Signed-off-by: szaimen <szaimen@e.mail.de>

address review

Signed-off-by: szaimen <szaimen@e.mail.de>

improve accessibility settings on mobile

Signed-off-by: szaimen <szaimen@e.mail.de>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #30643 from nextcloud/backport/30600/stable23

[stable23] Fix idn emails not working in shares

Remove useless indexes with duplicated names on backup table

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Update autoloader

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix user_ldap migration for long DNs support

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Move duplicated code to a base class for group_mapping migrations

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
Co-authored-by: Joas Schilling <213943+nickvergessen@users.noreply.github.com>

Split dropTable and createTable in two migrations

It is not possible to drop and create the same table in one migration

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Fix primary key change in user_ldap migration

Use a backup table to copy the data, drop table and recreate it with
 correct primary key, then copy the data back and drop the backup table.

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Fix wrong unified search link to folder

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Implement multibucket shift for ObjectStore

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Fix idn emails not working in shares

And add check before sending email that email address is valid

Fix #30595

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

Merge pull request #30636 from nextcloud/backport/30620/stable23

[stable23] Properly abort uploads

Properly hide progress bar after error

Whenever an error occurs, also hide the progress bar.

The logic was also adjusted to properly detect uploads that are pending
deletion, in which case the progress bar can already be hidden.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Properly abort uploads

Add a new approach for flagging an upload as aborted because we can't
rely on the browser fully cancelling the request as we now seem to
receive an error response from the server instead of a jQuery "abort"
message.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Merge pull request #30627 from nextcloud/backport/30593/stable23

[stable23] Trigger "changeDirectory" event on URL change

Merge pull request #30621 from nextcloud/backport/30358/stable23

[stable23] Reset job disabling timer on adding the job again

Trigger "changeDirectory" even on URL change

When using the browser back button or clicking on sections on the left
sidebar (like favorites), the "changeDirectory" jQuery event did not get
called, so apps like recommendations would not notice the directory
change.

This fixes the issue by also setting changeUrl to true when the file
list's directory got changed as a result from a URL change.

Added optional changedThroughUrl argument to make sure the event
recipient knows if the change was done through a URL change and make it
possible prevent a loop in the onDirectoryChange handler that actually
changes the URL when the origin was already from a URL change.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Merge pull request #30619 from nextcloud/backport/30609/stable23

[stable23] Fix RequestURL check for cli commands

Merge pull request #30611 from nextcloud/backport/30588/stable23

[stable23] Fix undefined/unset scope in account properties

Merge pull request #30623 from nextcloud/backport/30485/stable23

[stable23] Set the file's mtime from the headers in bulk upload

Set the file's mtime from the headers in bulk upload

Signed-off-by: Louis Chemineau <louis@chmn.me>

Reset job disabling timer on adding the job again

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #30602 from nextcloud/backport/30291/stable23

[stable23] Prevent loading images that would require too much memory.

Fix RequestURL check for cli commands

Fix https://github.com/nextcloud/files_automatedtagging/issues/526

Fix https://github.com/nextcloud/groupfolders/issues/1855

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

Fix test

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix undefined/unset scope in account properties

Signed-off-by: Joas Schilling <coding@schilljs.com>

Prevent loading images that would require too much memory.

For most image formats, the header specifies the width/height.
PHP allocates an image object from that size, even if the actual
image data is much smaller. This image object size is not limited
by the limit configured in PHP.

The memory limit can be configured through "config.php" setting
"preview_max_memory" and defaults to 128 MBytes which should be
enough for most images without filling up all memory.

Signed-off-by: Joachim Bauch <bauch@struktur.de>