]>
source.dussan.org Git - nextcloud-server.git/log
Roeland Jago Douma [Tue, 19 Nov 2019 07:40:18 +0000 (08:40 +0100)]
Merge pull request #17991 from nextcloud/dependabot/npm_and_yarn/build/stable14/https-proxy-agent-2.2.4
[Security] Bump https-proxy-agent from 2.2.1 to 2.2.4 in /build
dependabot-preview[bot] [Mon, 18 Nov 2019 19:34:31 +0000 (19:34 +0000)]
[Security] Bump https-proxy-agent from 2.2.1 to 2.2.4 in /build
Bumps [https-proxy-agent](https://github.com/TooTallNate/node-https-proxy-agent) from 2.2.1 to 2.2.4. **This update includes security fixes.**
- [Release notes](https://github.com/TooTallNate/node-https-proxy-agent/releases)
- [Commits](https://github.com/TooTallNate/node-https-proxy-agent/compare/2.2.1...2.2.4)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Nextcloud bot [Wed, 11 Sep 2019 02:15:36 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Tue, 10 Sep 2019 02:15:52 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sun, 8 Sep 2019 02:17:02 +0000 (02:17 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sat, 7 Sep 2019 02:15:54 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Fri, 6 Sep 2019 02:15:23 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Thu, 5 Sep 2019 02:16:36 +0000 (02:16 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Wed, 4 Sep 2019 02:16:37 +0000 (02:16 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Tue, 3 Sep 2019 02:15:26 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Mon, 2 Sep 2019 02:15:32 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sun, 1 Sep 2019 02:16:43 +0000 (02:16 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sat, 31 Aug 2019 02:15:04 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Fri, 30 Aug 2019 02:15:33 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Thu, 29 Aug 2019 02:15:13 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Roeland Jago Douma [Wed, 28 Aug 2019 06:42:00 +0000 (08:42 +0200)]
Merge pull request #16903 from nextcloud/dependabot/npm_and_yarn/settings/stable14/mixin-deep-1.3.2
[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /settings
Nextcloud bot [Wed, 28 Aug 2019 02:15:48 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
dependabot-preview[bot] [Tue, 27 Aug 2019 18:39:16 +0000 (18:39 +0000)]
[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /settings
Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. **This update includes a security fix.**
- [Release notes](https://github.com/jonschlinkert/mixin-deep/releases)
- [Commits](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Nextcloud bot [Tue, 27 Aug 2019 02:15:42 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Mon, 26 Aug 2019 02:14:55 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sun, 25 Aug 2019 02:14:23 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sat, 24 Aug 2019 02:15:29 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Fri, 23 Aug 2019 02:19:48 +0000 (02:19 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Thu, 22 Aug 2019 02:14:55 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Tue, 20 Aug 2019 02:15:09 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Mon, 19 Aug 2019 02:15:18 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sun, 18 Aug 2019 02:16:00 +0000 (02:16 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sat, 17 Aug 2019 02:15:22 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Fri, 16 Aug 2019 02:14:37 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Thu, 15 Aug 2019 02:14:56 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Roeland Jago Douma [Wed, 14 Aug 2019 18:07:08 +0000 (20:07 +0200)]
Merge pull request #16731 from nextcloud/version/14.0.14/final
14.0.14
Nextcloud bot [Wed, 14 Aug 2019 02:15:23 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Roeland Jago Douma [Tue, 13 Aug 2019 12:29:10 +0000 (14:29 +0200)]
14.0.14
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
Nextcloud bot [Tue, 13 Aug 2019 02:14:58 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Mon, 12 Aug 2019 02:15:13 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sun, 11 Aug 2019 02:15:47 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sat, 10 Aug 2019 02:15:15 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Fri, 9 Aug 2019 02:14:34 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Roeland Jago Douma [Thu, 8 Aug 2019 08:50:52 +0000 (10:50 +0200)]
Merge pull request #16675 from nextcloud/version/14.0.14/RC1
14.0.14 RC1
Nextcloud bot [Thu, 8 Aug 2019 02:15:04 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Roeland Jago Douma [Wed, 7 Aug 2019 12:08:35 +0000 (14:08 +0200)]
14.0.14 RC1
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
Nextcloud bot [Wed, 7 Aug 2019 02:14:57 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Tue, 6 Aug 2019 02:14:57 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Mon, 5 Aug 2019 02:14:46 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Roeland Jago Douma [Sun, 4 Aug 2019 20:50:31 +0000 (22:50 +0200)]
Merge pull request #16650 from nextcloud/dependabot/npm_and_yarn/build/stable14/fstream-1.0.12
[Security] Bump fstream from 1.0.11 to 1.0.12 in /build
dependabot-preview[bot] [Sun, 4 Aug 2019 07:56:38 +0000 (07:56 +0000)]
[Security] Bump fstream from 1.0.11 to 1.0.12 in /build
Bumps [fstream](https://github.com/npm/fstream) from 1.0.11 to 1.0.12. **This update includes a security fix.**
- [Release notes](https://github.com/npm/fstream/releases)
- [Commits](https://github.com/npm/fstream/compare/v1.0.11...v1.0.12)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Roeland Jago Douma [Sun, 4 Aug 2019 07:55:18 +0000 (09:55 +0200)]
Merge pull request #16648 from nextcloud/dependabot/npm_and_yarn/build/stable14/lodash.mergewith-4.6.2
[Security] Bump lodash.mergewith from 4.6.1 to 4.6.2 in /build
Nextcloud bot [Sun, 4 Aug 2019 02:15:41 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
dependabot-preview[bot] [Sun, 4 Aug 2019 01:12:30 +0000 (01:12 +0000)]
[Security] Bump lodash.mergewith from 4.6.1 to 4.6.2 in /build
Bumps [lodash.mergewith](https://github.com/lodash/lodash) from 4.6.1 to 4.6.2. **This update includes a security fix.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/commits)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Nextcloud bot [Sat, 3 Aug 2019 02:14:53 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Fri, 2 Aug 2019 02:14:52 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Thu, 1 Aug 2019 02:15:50 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Roeland Jago Douma [Wed, 31 Jul 2019 06:34:14 +0000 (08:34 +0200)]
Merge pull request #16609 from nextcloud/backport/stable14/16596
[stable14] Set proper defaults for v-tooltip usages
Nextcloud bot [Wed, 31 Jul 2019 02:16:26 +0000 (02:16 +0000)]
[tx-robot] updated from transifex
Roeland Jago Douma [Tue, 30 Jul 2019 14:31:14 +0000 (16:31 +0200)]
Merge pull request #16612 from nextcloud/backport/16599/stable14
[stable14] Fix/xss/on favorite file
Max Fichtelmann [Mon, 29 Jul 2019 15:48:33 +0000 (17:48 +0200)]
prevent potential XSS via unchecked use innerHTML
Signed-off-by: Max Fichtelmann <max.fichtelmann@procilon.de>
Max Fichtelmann [Mon, 29 Jul 2019 15:44:01 +0000 (17:44 +0200)]
fix XSS when adding a file with a malicious name to favorites
Signed-off-by: Max Fichtelmann <max.fichtelmann@procilon.de>
Julius Härtl [Tue, 30 Jul 2019 07:03:07 +0000 (09:03 +0200)]
Bump bundles
Signed-off-by: Julius Härtl <jus@bitgrid.net>
Julius Härtl [Mon, 29 Jul 2019 13:51:08 +0000 (15:51 +0200)]
Force defaultHtml setting of v-tooltip to be disabled
Signed-off-by: Julius Härtl <jus@bitgrid.net>
Nextcloud bot [Tue, 30 Jul 2019 02:15:11 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Mon, 29 Jul 2019 02:15:21 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sun, 28 Jul 2019 02:15:46 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sat, 27 Jul 2019 02:14:59 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Fri, 26 Jul 2019 02:15:02 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Thu, 25 Jul 2019 02:15:01 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Wed, 24 Jul 2019 02:15:56 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Tue, 23 Jul 2019 02:16:05 +0000 (02:16 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Mon, 22 Jul 2019 02:16:22 +0000 (02:16 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sun, 21 Jul 2019 02:15:31 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sat, 20 Jul 2019 02:14:53 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Fri, 19 Jul 2019 02:27:39 +0000 (02:27 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Thu, 18 Jul 2019 02:15:19 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Roeland Jago Douma [Wed, 17 Jul 2019 07:51:25 +0000 (09:51 +0200)]
Merge pull request #16434 from nextcloud/backport/16424/stable14
[stable14] Do not keep searching for recent
Roeland Jago Douma [Tue, 16 Jul 2019 17:10:09 +0000 (19:10 +0200)]
Do not keep searching for recent
If userA has a lot of recent files. But only shares 1 file with userB
(that has no files at all). We could keep searching until we run out of
recent files for userA.
Now assume the inactive userB has 20 incomming shares like that from
different users. getRecent then basically keeps consuming huge amounts
of resources and with each iteration the load on the DB increases
(because of the offset).
This makes sure we do not get more than 3 times the limit we search for
or more than 5 queries.
This means we might miss some recent entries but we should fix that
separatly. This is just to make sure the load on the DB stays sane.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
Nextcloud bot [Wed, 17 Jul 2019 02:15:52 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Roeland Jago Douma [Tue, 16 Jul 2019 20:18:26 +0000 (22:18 +0200)]
Merge pull request #16427 from nextcloud/backport/16423/stable14
[stable14] Only prevent disabling encrytion via the API
Joas Schilling [Tue, 16 Jul 2019 12:24:47 +0000 (14:24 +0200)]
Only prevent disabling encrytion via the API
Signed-off-by: Joas Schilling <coding@schilljs.com>
Nextcloud bot [Tue, 16 Jul 2019 02:15:10 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Mon, 15 Jul 2019 02:14:49 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sun, 14 Jul 2019 02:15:26 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sat, 13 Jul 2019 02:14:38 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Fri, 12 Jul 2019 02:15:21 +0000 (02:15 +0000)]
[tx-robot] updated from transifex
Morris Jobke [Thu, 11 Jul 2019 10:54:28 +0000 (12:54 +0200)]
Merge pull request #16347 from nextcloud/dependabot/npm_and_yarn/settings/stable14/lodash-4.17.14
[Security] Bump lodash from 4.17.11 to 4.17.14 in /settings
dependabot-preview[bot] [Thu, 11 Jul 2019 10:53:22 +0000 (10:53 +0000)]
[Security] Bump lodash from 4.17.11 to 4.17.14 in /settings
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.14. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.11...4.17.14)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Morris Jobke [Thu, 11 Jul 2019 10:52:52 +0000 (12:52 +0200)]
Merge pull request #16354 from nextcloud/dependabot/npm_and_yarn/apps/oauth2/stable14/lodash-4.17.14
[Security] Bump lodash from 4.17.11 to 4.17.14 in /apps/oauth2
Morris Jobke [Thu, 11 Jul 2019 10:52:33 +0000 (12:52 +0200)]
Merge pull request #16355 from nextcloud/dependabot/npm_and_yarn/apps/updatenotification/stable14/lodash-4.17.14
[Security] Bump lodash from 4.17.11 to 4.17.14 in /apps/updatenotification
Morris Jobke [Thu, 11 Jul 2019 10:52:00 +0000 (12:52 +0200)]
Merge pull request #16358 from nextcloud/dependabot/npm_and_yarn/apps/accessibility/stable14/lodash-4.17.14
[Security] Bump lodash from 4.17.11 to 4.17.14 in /apps/accessibility
dependabot-preview[bot] [Thu, 11 Jul 2019 10:51:28 +0000 (10:51 +0000)]
[Security] Bump lodash in /apps/updatenotification
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.14. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.11...4.17.14)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
dependabot-preview[bot] [Thu, 11 Jul 2019 10:51:19 +0000 (10:51 +0000)]
[Security] Bump lodash from 4.17.11 to 4.17.14 in /apps/oauth2
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.14. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.11...4.17.14)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
dependabot-preview[bot] [Thu, 11 Jul 2019 10:51:18 +0000 (10:51 +0000)]
[Security] Bump lodash from 4.17.11 to 4.17.14 in /apps/accessibility
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.14. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.11...4.17.14)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Morris Jobke [Thu, 11 Jul 2019 10:49:25 +0000 (12:49 +0200)]
Merge pull request #16342 from nextcloud/dependabot/npm_and_yarn/settings/stable14/lodash.merge-4.6.2
[Security] Bump lodash.merge from 4.6.1 to 4.6.2 in /settings
Roeland Jago Douma [Thu, 11 Jul 2019 06:57:35 +0000 (08:57 +0200)]
Merge pull request #16356 from nextcloud/dependabot/npm_and_yarn/build/stable14/lodash-4.17.14
[Security] Bump lodash from 4.17.11 to 4.17.14 in /build
dependabot-preview[bot] [Thu, 11 Jul 2019 03:20:40 +0000 (03:20 +0000)]
[Security] Bump lodash from 4.17.11 to 4.17.14 in /build
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.14. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.11...4.17.14)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Nextcloud bot [Thu, 11 Jul 2019 02:14:50 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
dependabot-preview[bot] [Wed, 10 Jul 2019 23:15:01 +0000 (23:15 +0000)]
[Security] Bump lodash.merge from 4.6.1 to 4.6.2 in /settings
Bumps [lodash.merge](https://github.com/lodash/lodash) from 4.6.1 to 4.6.2. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/commits)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Nextcloud bot [Wed, 10 Jul 2019 02:14:23 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Tue, 9 Jul 2019 02:14:10 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sun, 7 Jul 2019 02:14:33 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Sat, 6 Jul 2019 02:14:04 +0000 (02:14 +0000)]
[tx-robot] updated from transifex
Nextcloud bot [Fri, 5 Jul 2019 02:14:29 +0000 (02:14 +0000)]
[tx-robot] updated from transifex