Prevent self-xss via invalid mysql user name on install screen

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #19440 from nextcloud/fix/filename_popovermenu_misalignment

Fix filename and popover menu misalignment

[tx-robot] updated from transifex

Merge pull request #19721 from nextcloud/bug/19695/workflow-regex-office

Fix regex for office documents

Merge pull request #19671 from nextcloud/fix-loading-icons-on-replaced-elements

Fix loading icons on replaced elements

Merge pull request #19769 from nextcloud/bugfix/noid/share-owner-avatar

Fix avatar in file list for users with an @ in the uid

Merge pull request #19787 from nextcloud/bugfix/noid/fix-js-regex

Fix JS regex

Merge pull request #19743 from nextcloud/cache-updater-storage-mtime-false

dont try to update storage mtime if we can't get the mtime

Fix JS regex

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19739 from nextcloud/bugfix/noid/groupid-spaces

Do not use replace on the group id

Merge pull request #19764 from nextcloud/fix/transfer-ownerhip-owner-check

Do not allow transfer ownership when the user isn't the owner

Merge pull request #19766 from nextcloud/dependabot/composer/phpseclib/phpseclib-2.0.25

Bump phpseclib/phpseclib from 2.0.23 to 2.0.25

Bump bundles

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Fix regex to not take email uids as federated ids

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Bump phpseclib/phpseclib from 2.0.23 to 2.0.25

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #19723 from nextcloud/bug/18603/avatar-response

Always use status 200 for avatar response

Merge pull request #19741 from nextcloud/dependabot/composer/pear/archive_tar-1.4.9

Bump pear/archive_tar from 1.4.8 to 1.4.9

Do not allow transfer ownership when the user isn't the owner

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #19755 from nextcloud/bug/19754/translate-tags

Fetch translate for Tags from files app

Fetch translate for Tags from files app

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Bump pear/archive_tar from 1.4.8 to 1.4.9

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

[tx-robot] updated from transifex

Merge pull request #19742 from nextcloud/bug/19740/add-msg-for-exception

Add message for DoesNotExistException

dont try to update storage mtime if we can't get the mtime

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #19731 from nextcloud/fix/15455/dont_hanlde_deleted_shares

Don't try to format deleted shares

Fix regex for office documents

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Add message for DoesNotExistException

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #19697 from nextcloud/dependabot/composer/aws/aws-sdk-php-3.133.23

Bump aws/aws-sdk-php from 3.93.9 to 3.133.23

Do not use replace on the group id

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Bump aws/aws-sdk-php from 3.93.9 to 3.133.23

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Don't try to format deleted shares

Fixes #15455

The issue is that we have a fallback for shares to use the target. So
when the target exists again we happily format it (not that the shares
are still invalid).

This just tries to get the node. If we can't then boom.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #19713 from nextcloud/dependabot/npm_and_yarn/sinon-9.0.0

Bump sinon from 8.1.1 to 9.0.0

Merge pull request #19699 from nextcloud/bugfix/19349/allow-single-file-downloads

Allow single file downloads so the video player works again

Merge pull request #19722 from nextcloud/bug/18727/dont-resize-svg

Don't try to resize a svg uploaded as background image

[tx-robot] updated from transifex

Don't try to resize a svg uploaded as background image.

image* are gd functions without support for svg hence we are not able to resize svg.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #19714 from nextcloud/dependabot/npm_and_yarn/babel/core-7.8.6

Bump @babel/core from 7.8.4 to 7.8.6

Bump @babel/core from 7.8.4 to 7.8.6

Bumps [@babel/core](https://github.com/babel/babel) from 7.8.4 to 7.8.6.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/master/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/compare/v7.8.4...v7.8.6)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #19712 from nextcloud/dependabot/npm_and_yarn/vue-router-3.1.6

Bump vue-router from 3.1.5 to 3.1.6

Bump vue-router from 3.1.5 to 3.1.6

Bumps [vue-router](https://github.com/vuejs/vue-router) from 3.1.5 to 3.1.6.
- [Release notes](https://github.com/vuejs/vue-router/releases)
- [Changelog](https://github.com/vuejs/vue-router/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-router/compare/v3.1.5...v3.1.6)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #19710 from nextcloud/dependabot/npm_and_yarn/babel-eslint-10.1.0

Bump babel-eslint from 10.0.3 to 10.1.0

Merge pull request #19709 from nextcloud/dependabot/npm_and_yarn/babel/preset-env-7.8.6

Bump @babel/preset-env from 7.8.3 to 7.8.6

[tx-robot] updated from transifex

Always use status 200 for avatar response

As discussed in #18603 caching a 201 response is hard. It's now possible to distinguish between generated and uploaded avatars by reading the X-NC-IsCustomAvatar (0 = generated, 1 = uploaded) header.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Bump @babel/preset-env from 7.8.3 to 7.8.6

Bumps [@babel/preset-env](https://github.com/babel/babel) from 7.8.3 to 7.8.6.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/master/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/compare/v7.8.3...v7.8.6)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #19707 from nextcloud/fix/noid/non-centered-nojavascript

Fix non-centered no javascript message

Bump sinon from 8.1.1 to 9.0.0

Bumps [sinon](https://github.com/sinonjs/sinon) from 8.1.1 to 9.0.0.
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sinonjs/sinon/compare/v8.1.1...v9.0.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bump babel-eslint from 10.0.3 to 10.1.0

Bumps [babel-eslint](https://github.com/babel/babel-eslint) from 10.0.3 to 10.1.0.
- [Release notes](https://github.com/babel/babel-eslint/releases)
- [Commits](https://github.com/babel/babel-eslint/compare/v10.0.3...v10.1.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Fix non-centered no javascript message

Signed-off-by: Gary Kim <gary@garykim.dev>

[tx-robot] updated from transifex

Merge pull request #19664 from nextcloud/feature/revive-send-welcome-email-toggle

Revive the "send email to new users" toggle for the user form

Allow single file downloads so the video player works again

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #19493 from nextcloud/simplefile-new-lazy

Create SimpleFile only when writing the content

Revive the "send email to new users" toggle for the user form

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #19321 from nextcloud/enh/allow-to-overwrite-share-target-mountpoints

Allow to overwrite share target mountpoints

Merge pull request #19673 from nextcloud/dependabot/composer/php-opencloud/openstack-3.0.7

Bump php-opencloud/openstack from 3.0.6 to 3.0.7

Bump autoloader

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

allow writing content directly when creating new SimpleFile

Signed-off-by: Robin Appelman <robin@icewind.nl>

Create SimpleFile only when writing the content

instead of first creating an empty file and then writing the content.

This solves the overhead of creating an empty file with the common pattern:

```php
$file = $simpleFilder->newFile('foo.txt');
$file->putContent('bar.txt');
```

roughly halving the number of storage and database operations that need to be done when creating a `SimpleFile`.

This is not automatically done with `File` because that has a more complex api which I'm more hesitant to touch.
Instead the `Folder::newFile` api has been extended to accept the content for the new file.

In my local testing, the overhead of first creating an empty file took about 20% of the time for preview generation

Signed-off-by: Robin Appelman <robin@icewind.nl>

better tests for SimpleFolder

test behavior, not implementation

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #19694 from nextcloud/bugfix/noid/cache-404-avatar-responses-too

Also cache avatars when it's not allowed

Also cache avatars when it's not allowed

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #19613 from nextcloud/enh/19537/undefined-index-password

Check that username and password are present.

Merge pull request #19666 from nextcloud/bug/19416/referrer-policy-fallback

Don't show referrer policy warning if fallback policy set.

Merge pull request #19655 from nextcloud/bugfix/noid/upload-cleanup-user-not-found

Catch NotFoundException when getting the user folder

Merge pull request #19676 from nextcloud/bugfix/noid/hover-color-of-search-results

Theme search results

Merge pull request #19683 from RDIL/patch-1

Readme: fix typo

[tx-robot] updated from transifex

Readme: fix typo

Theme search results

Signed-off-by: Joas Schilling <coding@schilljs.com>

Bump php-opencloud/openstack from 3.0.6 to 3.0.7

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #19665 from nextcloud/dependabot/composer/league/flysystem-1.0.64

Bump league/flysystem from 1.0.37 to 1.0.64

Merge pull request #19670 from nextcloud/techdebt/noid/allow-to-remove-listeners

Allow to remove listeners

Allow to remove listeners

Signed-off-by: Joas Schilling <coding@schilljs.com>

Adjust list of replaced elements to the spec

"button, textarea, select, div[contenteditable='true']" were removed and
"audio, canvas, embed, iframe" were added.

Note that this is a coarse-grained list; according to the spec some of
the elements, like canvas or input, might be treated as a replaced
element in some cases and as ordinary elements in others:
https://html.spec.whatwg.org/multipage/rendering.html#replaced-elements

For now all the elements that might be replaced elements use the loading
image by default, so apps will need to override that when the elements
are treated as ordinary elements. Of course that can be flipped in the
future to instead make an element to use the "::after" approach by
default if it is found that the element requires the override often.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>

Set loading image on replaced elements instead of on their descendants

Replaced elements do not have "::after" nor "::before" pseudo-elements,
so the regular loading icon needs to be shown using a background image
instead of the default "::after" pseudo-element approach. However, the
CSS rules were not applied on the replaced elements themselves, but on
their descendants. As the descendants might have support for
pseudo-elements the rules were fixed to be applied on the replaced
elements, and only on the replaced elements.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>

Merge pull request #19659 from nextcloud/techdebt/17486/allow-non-integer-ids-in-entity-mapper

Allow non integer ids in Entity Mapper

Bump league/flysystem from 1.0.37 to 1.0.64

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #19632 from nextcloud/dependabot/composer/pear/pear-core-minimal-1.10.10

Bump pear/pear-core-minimal from 1.10.3 to 1.10.10

[tx-robot] updated from transifex

Don't show referrer policy warning if fallback policy set.

Test-Set:

no-referrer-when-downgrade
no-referrer
strict-origin-when-cross-origin
same-origin
no-referrer, strict-origin-when-cross-origin
strict-origin-
unsafe-raw, same-origin
strict-origin-when-downgrade

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Bump pear/pear-core-minimal from 1.10.3 to 1.10.10

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #19324 from nextcloud/3rdparty/composer/microsoft/azure-storage-blob-1.5.0

[3rdparty] Bump microsoft/azure-storage-blob from 1.2.0 to 1.5.0

Allow non integer ids in Entity Mapper

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #19589 from nextcloud/bug/19162/reindex-quota-preset

Make sure quota_preset is using numerical indexes

Catch NotFoundException when getting the user folder

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[3rdparty] Bump microsoft/azure-storage-blob from 1.2.0 to 1.5.0

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

[tx-robot] updated from transifex

Merge pull request #19433 from nextcloud/bugfix/noid/fix-installing-talk

Fix installing Talk due to hardcoded route

Merge pull request #19539 from nextcloud/bugfix/noid/allow-to-create-directories-when-they-are-selectable

Allow to create directories when they are selectable

Merge pull request #19252 from nextcloud/bug/fix-notification-object-id

Hash event UID to make sure it's not too long for PushProvider notifications

Merge pull request #19634 from nextcloud/bugfix/noid/long-cyrillic-note

Correctly trim long cyrillic note

Copy isFileNameValid function, so the filepicker works without the files app

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix "TypeError: u.$form is undefined"

Signed-off-by: Joas Schilling <coding@schilljs.com>

Allow to create directories when they are selectable

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #19604 from nextcloud/dependabot/npm_and_yarn/p-queue-6.3.0

Bump p-queue from 6.2.1 to 6.3.0

Correctly trim long cyrillic note

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #19619 from nextcloud/bugfix/19618/theme-dragndrop-hover-color

Fix hover state color of drag-n-drop with theming and dark mode