Bump vue-router from 3.0.7 to 3.1.2

Bumps [vue-router](https://github.com/vuejs/vue-router) from 3.0.7 to 3.1.2.
- [Release notes](https://github.com/vuejs/vue-router/releases)
- [Changelog](https://github.com/vuejs/vue-router/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-router/compare/v3.0.7...v3.1.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #16179 from J0WI/mv-frameoptions

Add X-Frame-Options header to .htaccess

Merge pull request #16713 from nextcloud/dependabot/npm_and_yarn/style-loader-1.0.0

Bump style-loader from 0.23.1 to 1.0.0

Remove duplicated spaces

Signed-off-by: J0WI <J0WI@users.noreply.github.com>

Use "always" condition for security headers

Signed-off-by: J0WI <J0WI@users.noreply.github.com>

Sort headers

Signed-off-by: J0WI <J0WI@users.noreply.github.com>

Add X-Frame-Options header to .htaccess

Signed-off-by: J0WI <J0WI@users.noreply.github.com>

Bump style-loader from 0.23.1 to 1.0.0

Bumps [style-loader](https://github.com/webpack-contrib/style-loader) from 0.23.1 to 1.0.0.
- [Release notes](https://github.com/webpack-contrib/style-loader/releases)
- [Changelog](https://github.com/webpack-contrib/style-loader/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack-contrib/style-loader/compare/v0.23.1...v1.0.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #16716 from nextcloud/dependabot/npm_and_yarn/css-loader-3.2.0

Bump css-loader from 3.1.0 to 3.2.0

Merge pull request #16717 from nextcloud/dependabot/npm_and_yarn/file-loader-4.2.0

Bump file-loader from 4.1.0 to 4.2.0

Bump css-loader from 3.1.0 to 3.2.0

Bumps [css-loader](https://github.com/webpack-contrib/css-loader) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/webpack-contrib/css-loader/releases)
- [Changelog](https://github.com/webpack-contrib/css-loader/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack-contrib/css-loader/compare/v3.1.0...v3.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #16714 from nextcloud/dependabot/npm_and_yarn/nextcloud-vue-0.12.1

Bump nextcloud-vue from 0.12.0 to 0.12.1

Merge pull request #16715 from nextcloud/dependabot/npm_and_yarn/blueimp-md5-2.11.1

Bump blueimp-md5 from 2.11.0 to 2.11.1

Bump file-loader from 4.1.0 to 4.2.0

Bumps [file-loader](https://github.com/webpack-contrib/file-loader) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/webpack-contrib/file-loader/releases)
- [Changelog](https://github.com/webpack-contrib/file-loader/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack-contrib/file-loader/compare/v4.1.0...v4.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bump sass-loader from 7.1.0 to 7.2.0 (#16712)

Bump sass-loader from 7.1.0 to 7.2.0

Bump nextcloud-vue from 0.12.0 to 0.12.1

Bumps [nextcloud-vue](https://github.com/nextcloud/nextcloud-vue) from 0.12.0 to 0.12.1.
- [Release notes](https://github.com/nextcloud/nextcloud-vue/releases)
- [Commits](https://github.com/nextcloud/nextcloud-vue/compare/v0.12.0...v0.12.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #16613 from nextcloud/enh/featurepolicy

Add Feature-Policy header

Bump blueimp-md5 from 2.11.0 to 2.11.1

Bumps [blueimp-md5](https://github.com/blueimp/JavaScript-MD5) from 2.11.0 to 2.11.1.
- [Release notes](https://github.com/blueimp/JavaScript-MD5/releases)
- [Commits](https://github.com/blueimp/JavaScript-MD5/compare/v2.11.0...v2.11.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

[tx-robot] updated from transifex

Bump sass-loader from 7.1.0 to 7.2.0

Bumps [sass-loader](https://github.com/webpack-contrib/sass-loader) from 7.1.0 to 7.2.0.
- [Release notes](https://github.com/webpack-contrib/sass-loader/releases)
- [Changelog](https://github.com/webpack-contrib/sass-loader/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack-contrib/sass-loader/compare/v7.1.0...v7.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Add tests

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Add feature policy header

This adds the events and the classes to modify the feature policy.
It also adds a default restricted feature policy.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Bump js-yaml from 3.12.0 to 3.13.1 in /build (#16693)

Bump js-yaml from 3.12.0 to 3.13.1 in /build

Merge pull request #16638 from nextcloud/fix/noid/ldap-ext-storage-handler-loading-cli

delay sending event from app init to when they are needed

Have the OCSBaseResponse call the parent constructor

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Bump js-yaml from 3.12.0 to 3.13.1 in /build

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.12.0 to 3.13.1.
- [Release notes](https://github.com/nodeca/js-yaml/releases)
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/3.12.0...3.13.1)

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #15187 from vitormattos/bugfix-create-database-user

Bugfix: user is not allowed

Merge pull request #16683 from nextcloud/fix/audit/disabled-user-message

Fix enable/disable user audit message

Merge pull request #16686 from nextcloud/fix/16684/return_int_getIf

Properly return an int in the getId function of the cache

[tx-robot] updated from transifex

Bump nextcloud-vue to 0.12.0 (#16681)

Bump nextcloud-vue to 0.12.0

Properly return an int in the getId function of the cache

fixes #16684

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Fix enable/disable user audit message

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Bump nextcloud-vue to 0.12.0

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

[tx-robot] updated from transifex

Fix ie app menu loading click (#16667)

Fix ie app menu loading click

Fix ie app menu loading click

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

prevent the server's app-navigation's css to overrule the scop… (#16661)

prevent the server's app-navigation's css to overrule the scoped css …

prevent the server's app-navigation's css to overrule the scoped css in vue components

Signed-off-by: Marco Ambrosini <marcoambrosini@pm.me>

[tx-robot] updated from transifex

Merge pull request #16498 from nextcloud/feature/noid/room_metadata

Allow calendar resources/rooms to provide metadata

Merge pull request #16639 from nextcloud/feature/noid/new-types

Adding comparaison types: +regex +wildcard (fulltextsearch)

Merge pull request #16643 from nextcloud/enh/moreDIUsage

Lets use DI where we can

Merge pull request #16649 from nextcloud/dependabot/npm_and_yarn/nextcloud-vue-collections-0.5.6

Bump nextcloud-vue-collections from 0.5.4 to 0.5.6

Bump nextcloud-vue-collections from 0.5.4 to 0.5.6

Bumps [nextcloud-vue-collections](https://github.com/juliushaertl/nextcloud-vue-collections) from 0.5.4 to 0.5.6.
- [Release notes](https://github.com/juliushaertl/nextcloud-vue-collections/releases)
- [Commits](https://github.com/juliushaertl/nextcloud-vue-collections/compare/v0.5.4...v0.5.6)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

[tx-robot] updated from transifex

Merge pull request #16651 from nextcloud/dependabot/npm_and_yarn/webpack-4.39.1

Bump webpack from 4.38.0 to 4.39.1

Bump webpack from 4.38.0 to 4.39.1

Bumps [webpack](https://github.com/webpack/webpack) from 4.38.0 to 4.39.1.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](https://github.com/webpack/webpack/compare/v4.38.0...v4.39.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Lets use DI where we can

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Add standard metadata key for room-features

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

comparaison types: +regex +wildcard

Signed-off-by: Maxence Lange <maxence@artificial-owl.com>

delay sending event from app init to when they are needed

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #16525 from nextcloud/bugfix/external-user-substitution

files_external: proper user context for sharing

fix check for null

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Adjust tests

Signed-off-by: Julius Härtl <jus@bitgrid.net>

fixes terminology and allows to request an IUser instance

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

adjusts LDAP's home handler to use the correct user object

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

do not send null value when string is expected

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Provide proper user context from initMountPoints

Signed-off-by: Julius Härtl <jus@bitgrid.net>

files_external: Make sure the correct user context is used in substitution of variables

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

Allow to do a principal property search based on metadata keys

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

Provide standard metadata keys for contact person of a resource

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

Provide standard metadata keys for location of room

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

Test resource and room principal backend to check that they provide metadata

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

Merge pull request #16624 from nextcloud/bugfix/noid/versions-fetch-owner-only

Make sure we only fetch the file by id for the actual owner

Merge pull request #16622 from nextcloud/design/scrollbar

Standardize scrollbar color and width across Webkit and Firefox

Test sync of resource and room metadata

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

Merge pull request #16586 from nextcloud/feature/16585_adminAuditShareCirclesRemotel/wiswedel

log circles and remote shares in admin_audit

log circles and remote shares in admin_audit

Signed-off-by: Sascha Wiswedel <sascha.wiswedel@nextcloud.com>

Merge pull request #16592 from nextcloud/bugfix/noid/federated-reshare

Fix permission check on incoming federated shares

Make sure we only fetch the file by id for the actual owner

Otherwise this will fetch all mounts for the file id which is quite
expensive and causes long saving times in big sharing structures

Signed-off-by: Julius Härtl <jus@bitgrid.net>

sync metadata of rooms / resources with cache

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

provide room / resource properties as principal properties

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

add oc_calendar_resources_md and oc_calendar_rooms_md tables

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

Add \OCP\Calendar\IMetadataProvider interface and provider for common metadata keys

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

[tx-robot] updated from transifex

Merge pull request #16618 from nextcloud/enh/csp/form-action

Add form-action CSP element

Standardize scrollbar color and width across Webkit and Firefox

Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>

Update CSP test cases to handle the new form-action

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Add form-action CSP element

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Fix permission check on incoming federated shares

Since federated shares have their permissions set on the node, we do not need
to check for parent share permissions. Otherwise reshares of incoming federated
have no permission variable defined and creating them will fail

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #16619 from nextcloud/bugfix/16446/theming-url-validate

Validate urls in theming settings and properly handle error messages

Merge pull request #16544 from nextcloud/bugfix/16540

Add missing password reset page to vue

Merge pull request #16616 from nextcloud/dep/setEvalScript

setting unsafe-eval is deprecated

Validate urls in theming settings and properly handle error messages

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Move actual password reset to vue

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

setting unsafe-eval is deprecated

This will be removed in a future version of Nextcloud.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #16594 from nextcloud/tech-debt/noid/remove-unused-checkPasswordProtectedShare

Remove unused OC\Share\Share::checkPasswordProtectedShare

Merge pull request #16599 from nextcloud/fix/xss/on-favorite-file

Fix/xss/on favorite file

Merge pull request #16593 from nextcloud/fix/noid/more-precise-error-message

More precise error message when expected filesize does not match

Merge pull request #16579 from nextcloud/enh/PostLoginEvent

Add proper PostLoginEvent

Merge pull request #16596 from nextcloud/bugfix/noid/vtooltip-defaults

Set proper defaults for v-tooltip usages

Merge pull request #16595 from nextcloud/tech-debt/noid/no-need-to-document-the-obvious

Do not document the obvious

[tx-robot] updated from transifex