fix PHP 7.3 compat

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

avoid early DI of IAppManager

- might break install

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

load widgets only of enabled apps

- per design, all enabled apps have their registration run
- limitations, e.g. enabled by group, are not considered in that state,
  because we do not have a session (and might need apps?)
- before instantiation of widget it has to be checked whether the providing
  app is actually enabled for the logged in user.
- a public interface is being changed, but it is not meant to be
  implemented or used outside of the core handling. Therefore save to
  backport.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #33348 from nextcloud/dependabot/npm_and_yarn/stable23/dompurify-2.3.10

Bump dompurify from 2.3.8 to 2.3.10

Merge pull request #33351 from nextcloud/backport/33315/stable23

[stable23] Reset user status based on message ID only

Merge pull request #33365 from nextcloud/backport/33341/stable23

[stable23] Don't try to purge objects from the birthday calendar when it doesn't exist

Don't try to purge objects from the birthday calendar when it doesn't exist

Doesn't matter much as it's been recreated afterwards with (ensureCalendarExists).

Closes #29617

Signed-off-by: Thomas Citharel <tcit@tcit.fr>

Reset user status based on message ID only

Since some statuses (call) can occure with different status
(away and dnd) we need to reset only based on the message id.
But as it can not be set by the user this is still save and okay.

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #33344 from nextcloud/backport/33129/stable23

[stable23] Fix reading blob data as resource

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Bump dompurify from 2.3.8 to 2.3.10

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 2.3.8 to 2.3.10.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/2.3.8...2.3.10)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Fix reading blob data as resource

PostgreSQL returns data as resource when using IQueryBuilder::PARAM_LOB
(which is used for QBMapper).

Previously we just converted this resource using settype, which produced
things like "Resource id #14" instead of the actual resource data.

Now we read the stream correctly if the returned data is a resource

See context at #22472

Fixes #22439

Signed-off-by: Thomas Citharel <tcit@tcit.fr>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33253 from nextcloud/backport/32963/stable23

[stable23] also use nextcloud certificate bundle when downloading from s3

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33277 from nextcloud/backport/33270/stable23

[stable23] fix loading legacy app.php with multi app dir

fix loading legacy app.php with multi app dir

- requireAppFile() only appends /appinfo/app.php
- without the absolute path, require_once looks into include_path
- the first match in inlcude_path however migth be different from appPath
- fixed by providing the tested(!), full path to the app

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33257 from nextcloud/release/23.0.7

23.0.7

23.0.7

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

only use nextcloud bundle when explicitly enabled

Signed-off-by: Robin Appelman <robin@icewind.nl>

also use nextcloud certificate bundle when downloading from s3

Signed-off-by: Robin Appelman <robin@icewind.nl>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33150 from nextcloud/automated/noid/stable23-update-psalm-baseline

[stable23] Update psalm-baseline.xml

Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33168 from nextcloud/release/23.0.7_rc2

23.0.7 RC2

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Merge pull request #33158 from nextcloud/backport/33153/stable23

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33123 from nextcloud/release/23.0.7_rc1

Merge pull request #32987 from nextcloud/backport/stable23/31771

[stable23] Fix hook encryption with cron job

Merge pull request #32529 from nextcloud/dependabot/npm_and_yarn/stable23/vue-router-3.5.4

Bump vue-router from 3.5.3 to 3.5.4

Merge pull request #33035 from nextcloud/backport/31345/stable23

Merge pull request #32919 from nextcloud/backport/32874/stable23

Only ignore attempts of the same action

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #33114 from nextcloud/backport/stable23/31194

[stable23] Allow to disable password policy enforcement for selected groups

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33144 from nextcloud/backport/33052/stable23

Fix unit tests

Signed-off-by: Joas Schilling <coding@schilljs.com>

Prevent duplicate set display name request

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Do not save invalid display name to the database

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Merge pull request #33133 from nextcloud/backport/32993/stable23

[stable23] Fixes for quota text in navigation bar

Bump vue-router from 3.5.3 to 3.5.4

Bumps [vue-router](https://github.com/vuejs/router) from 3.5.3 to 3.5.4.
- [Release notes](https://github.com/vuejs/router/releases)
- [Changelog](https://github.com/vuejs/router/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vuejs/router/commits)

---
updated-dependencies:
- dependency-name: vue-router
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Fix hook encryption with cron job

Make sure the setup fs is set before using the Update service

Backport of #29674

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

Fix quota text not updated after copying or moving a file

Note that the quota may change too when files are moved if the file is
moved, for example, to or from a folder shared by other user.

Besides the quota the storage statistics are also updated, similar to
what is done when a file is deleted.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>

Fix quota text not updated when no quota is set

The JavaScript code that updates the quota text expects the element to
have "quotatext" as id.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>

Fix quota text shown escaped

"t()" escapes and sanitizes the returned text by default, so strings
like "<" are converted to "&lt;". However, the "jQuery.text()" parameter
does not need to be escaped, as "&lt;" is shown literally as "&lt;"
rather than "<". Now "jQuery.html()" is used instead, which "unescapes"
the given text and sets it as a new text node (as the text in the
parameter does not contain markup for elements, only text).

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>

Merge pull request #33120 from nextcloud/backport/33109/stable23

[stable23] Fix translation of home breadcrumb

Merge pull request #33018 from nextcloud/dependabot/composer/build/integration/stable23/guzzlehttp/guzzle-6.5.8

Update guzzlehttp/guzzle requirement from 6.5.7 to 6.5.8 in /build/integration

Merge pull request #32890 from nextcloud/backport/32584/stable23

[stable23] Make sure ResetTokenBackgroundJob doesn't execute if config is read-only

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33024 from nextcloud/backport/29862/stable23

[stable23] Avoid deprecation warnings about libxml_disable_entity_loader in PHP 8+

Merge pull request #33116 from nextcloud/backport/33113/stable23

[stable23] Remove .php from ajax url

23.0.7 RC1

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Fix translation of home breadcrumb

Signed-off-by: Christopher Ng <chrng8@gmail.com>

add missing GET param to getstoragestats url

Signed-off-by: Julien Veyssier <eneiluj@posteo.net>
(cherry picked from commit ca6a7245032e87f6d7f65c8e796cc0f176659677)

Fix 404 when using index.php in the url

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
(cherry picked from commit ee793572cb9acc9d688b1ff191a59e8699af9da1)

Remove .php from url

Probably here for legacy reasons, but it is a bit weird to call an .php
endpoint that doesn't correspond to a .php file

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
(cherry picked from commit c7931086cc557211073540cf13e2af4c5afaaad3)

Allow to disable password policy enforcement for selected groups

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
Co-authored-by: Vincent Petry <vincent@nextcloud.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #33004 from nextcloud/backport/32719/stable23

[stable23] Fix email shares not being shown to other users

Merge pull request #32792 from nextcloud/backport/32675/stable23

[stable23] Validate custom dashboard background image

Merge pull request #32975 from nextcloud/backport/32016/stable23

[stable23] Use stored user for PasswordUpdatedEvent

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33059 from nextcloud/backport/33050/stable23

[stable23] Check whether entry is of type ICacheEntry in Cache->remove()

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Check whether entry is of type ICacheEntry in Cache->remove()

In some scenarios (file not in cache, but partial data of it in the
object), Cache->get() might return an array, which leads to errors like
"Call to a member function getId() on array".

So check whether the returned entry is of type ICacheEntry before doing
operations on it in Cache->remove().

Fixes: #33023
Signed-off-by: Jonas <jonas@freesources.org>

Merge pull request #33070 from nextcloud/backport/33065/stable23

[stable23] Fix detection of firefox in ContentSecurityPolicyNonceManager

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix detection of firefox in ContentSecurityPolicyNonceManager

Reuse Request::USER_AGENT_FIREFOX, and also update the safari detection
since safari < 12 is not supported anymore and we can remove a bit of
code duplication

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

Merge pull request #33010 from nextcloud/dependabot/composer/stable23/guzzlehttp/guzzle-7.4.5

[stable23] Bump guzzlehttp/guzzle (7.3.0 => 7.4.5)

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Avoid deprecation warnings about libxml_disable_entity_loader in PHP 8.1

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Merge pull request #33029 from nextcloud/backport/32998/stable23

[stable23] Rename setting name to reduce its length

Bump guzzlehttp/guzzle (7.3.0 => 7.4.5)

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

Rename setting name to reduce its length

Signed-off-by: Louis Chemineau <louis@chmn.me>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Use unique key to prevent email component reuse

Signed-off-by: Christopher Ng <chrng8@gmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
(cherry picked from commit 9455cd74dfe6b966acc0905971e62853bdae4169)
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #33030 from nextcloud/backport/32968/stable23

[stable23] Do not display the buffer_size info if the size is already set to a c…

do not display the buffer_size info if the size is already set to a certain threshold

Signed-off-by: szaimen <szaimen@e.mail.de>
Co-Authored-By: MichaIng <micha@dietpi.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Update guzzlehttp/guzzle requirement in /build/integration

Updates the requirements on [guzzlehttp/guzzle](https://github.com/guzzle/guzzle) to permit the latest version.
- [Release notes](https://github.com/guzzle/guzzle/releases)
- [Changelog](https://github.com/guzzle/guzzle/blob/6.5.8/CHANGELOG.md)
- [Commits](https://github.com/guzzle/guzzle/compare/6.5.7...6.5.8)

---
updated-dependencies:
- dependency-name: guzzlehttp/guzzle
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix email shares not being shown to other users

Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

Merge pull request #32991 from nextcloud/backport/32988/stable23

[stable23] Improve local domain detection