Trigger warning if empty array or false and X-Forwarded-Host is present

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Make check for empty trusted proxies more strict

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #14674 from CamilionEU/master

[app:files] Use current directory for hashing.

Merge pull request #14691 from nextcloud/rename-mountpoint-within-mountpoint

always allow moving mountpoints inside the same mountpoint

[tx-robot] updated from transifex

Merge pull request #14664 from nextcloud/bugfix/noid/absolute-paths-of-images-for-linked-collaboration-resources

Replace the icon-class with an absolute link to an image

Merge pull request #14747 from nextcloud/fix/access_list_external_storage

Fix getting the access list on external storage

Merge pull request #14744 from nextcloud/bugfix/noid/fix-push-notifications-for-updatenotifications

Always register the Notifier

always allow moving mountpoints inside the same mountpoint

even if that mountpoint isn't normally a valid target for moving mounts into

Signed-off-by: Robin Appelman <robin@icewind.nl>

Fix getting the access list on external storage

If a file is on external storage there is no owner. WHich means we can't
check. So just return an empty array then.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #14739 from nextcloud/bugfix/noid/header-link-navigation-style-is-too-catchy

Style of navigation links in header is too catchy

Return 200 instead of 404 when asking for collections of a resource

Signed-off-by: Joas Schilling <coding@schilljs.com>

Bump bundles

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Bump nextcloud-vue-collections

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Adjust gitattributes to ignore all files_sharing scripts in diff

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Adjust resource type to file

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Dispatch event to allow apps to load their script for collections

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Use rich objects instead of name, link and icon

Signed-off-by: Joas Schilling <coding@schilljs.com>

Replace the icon-class with an absolute link to an image

Otherwise the icon can not be displayed in mobile apps

Signed-off-by: Joas Schilling <coding@schilljs.com>

Also style the "too many apps" menu

Signed-off-by: Joas Schilling <coding@schilljs.com>

Always register the Notifier

... so background jobs without a user can prepare push notifications

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #14571 from cowai/optimize-files_external-notify

Use index to mark parent as outdated, fixes: #14537

[tx-robot] updated from transifex

Use two queries to mark parent as outdated

Signed-off-by: Ari Selseng <ari@selseng.net>

Style of navigation links in header is too catchy

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #14737 from nextcloud/improve-starting-speed-of-acceptance-tests

Improve startup speed of acceptance tests

Merge pull request #14736 from nextcloud/fix/do_not_load_showpassword

Fix showpassword loads

Merge pull request #14724 from nextcloud/enh/nonce_for_iframes

CSP: set nonce for iframes

Improve startup speed of acceptance tests

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #14666 from nextcloud/design/settings-header

Don't show 'Personal' header in settings when Admin section is not there

Fix showpassword loads

This is bundled by default. So trying to load it throws a warning in the
logs.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Adjust acceptance tests

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #14721 from nextcloud/fix/14639/trash_delete_perm

Trashbin: Delete => Delete permanently

Merge pull request #14719 from nextcloud/fix/14639/fix_preview_size_trash

Use higher preview resolution in trashbin

[tx-robot] updated from transifex

Don't show 'Personal' header in settings when Admin section is not there

Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>

[tx-robot] updated from transifex

CSP: set nonce for iframes

This for now uses the jsNonce. That way we can easily backport it.
For 17 I will fix it properly.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Trashbin: Delete => Delete permanently

For #14639

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Use higher preview resolution in trashbin

For #14639

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

Merge pull request #14643 from nextcloud/setup-page-db-select

fix database select styling in setup page

Merge pull request #14705 from nextcloud/deprecate/marked-escapeHTML-formatDate-getURLParameter-humanFileSize-relative_modified_date-select2

Deprecate marked, escapeHTML, formatDate, getURLParameter, humanFileS…

Merge pull request #14689 from nextcloud/rename-moveable-mount-readonly-parent

allow renaming the root of a movable mount even if the parent folder …

Merge pull request #14706 from nextcloud/warn-sqlite-fix

Fix language of SQLite warning, follow-up to #14682

Deprecate marked, escapeHTML, formatDate, getURLParameter, humanFileSize, relative_modified_date and select2

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Removed radio and shadow on active

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Merge pull request #14712 from nextcloud/remove-spaming-debug-logs

Remove spaming debug logs

Merge pull request #14641 from nextcloud/assemblystream-seek

make assemblystream seekable

Remove spaming debug logs

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #14628 from nextcloud/bugfix/14627/fix-plural-rule-detection

Fix plural rule detection for languages

[tx-robot] updated from transifex

Fix language of SQLite warning, follow-up to #14682

Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>

Merge pull request #14682 from nextcloud/warn-sqlite

Using SQLite should sound more scary 😈

Fix behaviour of plural default rule

* undefined and empty string should trigger the default plural form

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #14637 from nextcloud/design/grid-border

Add border around previews

Merge pull request #14686 from nextcloud/bugfix/noid/fix-hardcoded-f-url-handling

Add correct method for hardcoded `/f/{fileid}`

Merge pull request #14681 from nextcloud/forwardport/noid/fragile-tests

Disable fragile tests - part 2

Merge pull request #14702 from nextcloud/rakekniven-patch-1

Fixed Uppercase of Product name

Fixed Uppercase of Product name

Signed-off-by: Mark Ziegler <mark.ziegler@rakekniven.de>

Merge pull request #14690 from nextcloud/dav-rename-hande-failure

throw a proper error if rename fails in dav

Merge pull request #14693 from nextcloud/trashbin-restore-readonly-target

dont try to restore a trashbin item to a readonly target

Merge pull request #14687 from nextcloud/ci/noid/ldap-user-deletion

add an integration test that ensures deletion of LDAP users

Merge pull request #14684 from nextcloud/long-etag-dav

handle long etags from dav external storage

[tx-robot] updated from transifex

Merge pull request #14679 from nextcloud/fix/noid/l10n-accessibiltiy

Fix translation sync for accessibiltiy

Merge pull request #14683 from nextcloud/postgres-cast-string

add casting to string for postgresql query builder

Only show border for files with generated previews

Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>

Disable failing files app test - act 4

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Import needed class

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Disable failing files app test - act 3

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #14668 from nextcloud/fix/noid/make-appstore-test-more-stable

Make appstore app:enable test more robust by repeating if it fails on the first try

Disable failing app management test

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

dont try to restore a trashbin item to a readonly target

Signed-off-by: Robin Appelman <robin@icewind.nl>

throw a proper error if rename fails in dav

Signed-off-by: Robin Appelman <robin@icewind.nl>

allow renaming the root of a movable mount even if the parent folder is readonly

Signed-off-by: Robin Appelman <robin@icewind.nl>

add an integration test that ensures deletion of LDAP users

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Add correct method for hardcoded `/f/{fileid}`

Signed-off-by: Joas Schilling <coding@schilljs.com>

handle long etags from dav external storage

we can only store etags up to 40 characters long in the database, so when we get an etag that's longer we simply hash it to bring down the length

Signed-off-by: Robin Appelman <robin@icewind.nl>

add casting to string for postgresql query builder

Signed-off-by: Robin Appelman <robin@icewind.nl>

Using SQLite should sound more scary 😈

- According to our administrator manual we should mention limitation to minimal and development/testing instances

Signed-off-by: Marius Blüm <marius@lineone.io>

Disable failing comments app test - act 2

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Disable failing files app test - act 2

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Make appstore app:enable test more robust by using only shipped apps

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Add time between SMB test runs and properly log full changeset

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #14652 from nextcloud/fix/invalid_usernames

Do not allow invalid users to be created

Fix translation sync for accessibiltiy

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Do not allow invalid users to be created

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #12119 from nextcloud/add_circle_to_caldav_and_filepanel-15

Add Circle to Caldav and Filepanel

Merge pull request #14670 from nextcloud/bugfix/noid/theming-css-vars

Use SCSS variables since CSS vars are not loaded on public pages

Improve code

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

[app:files] Use current directory for hashing.

This fixes collisions that were causing uploads to break in a very
terrible way.

Kudos to @kesselb for finding the problematic place and to
@hottwister for the proposed solution.

Fixes #10527.

Use SCSS variables since CSS vars are not loaded on public pages

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #14663 from nextcloud/remove_userExternal_example

remove user_external example from config.sample.php

Merge pull request #14640 from nextcloud/techdebt/noid/disable-failing-tests

Disable fragile tests

👌 IMPROVE: remove user_external example from config.sample.php

Signed-off-by: Jonas Sulzer <jonas@violoncello.ch>

Wait up to 10 seconds for incoming changes from SMB notifier

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Disable fragile user acceptance tests

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Disable failing login test

 * tests/acceptance/features/login.feature:15
<details><summary>Show full log</summary>

```
  Scenario: log in with valid user and invalid password once fixed by admin # /drone/src/github.com/nextcloud/server/tests/acceptance/features/login.feature:15
    Given I act as John                                                     # ActorContext::iActAs()
    And I can not log in with user user0 and password 654231                # LoginPageContext::iCanNotLogInWithUserAndPassword()
    When I act as Jane                                                      # ActorContext::iActAs()
    And I am logged in as the admin                                         # LoginPageContext::iAmLoggedInAsTheAdmin()
    And I open the User settings                                            # SettingsMenuContext::iOpenTheUserSettings()
    And I set the password for user0 to 654321                              # UsersSettingsContext::iSetTheFieldForUserTo()
    And I act as John                                                       # ActorContext::iActAs()
    And I log in with user user0 and password 654321                        # LoginPageContext::iLogInWithUserAndPassword()
    Then I see that the current page is the Files app                       # FilesAppContext::iSeeThatTheCurrentPageIsTheFilesApp()
      Failed asserting that 'http://acceptance-login/index.php/login?user=user0' starts with "http://acceptance-login/index.php/apps/files/".

```
</details>

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Disable failing comments test

Signed-off-by: Morris Jobke <hey@morrisjobke.de>