nextcloud

Commit Graph

Author	SHA1	Message	Date
Lukas Reschke	84d9b17dc7	Check for !== false instead Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	3 years ago
Lukas Reschke	b0cef8827d	Check if dns_get_record returns non-false `dns_get_record` can return false which results in exceptions such as the ones shown in https://github.com/nextcloud/server/issues/27870. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	3 years ago
Sanpi	81c272a8a5	Fixes recursion count incrementation Signed-off-by: Sanpi <sanpi@homecomputing.fr>	3 years ago
Daniel Kesselberg	b6530e5e82	Ignore subdomain for soa queries Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	3 years ago
Aaron Ball	484913dc31	Fix DnsPinMiddleware resolve pinning bug Libcurl expects the value of the CURLOPT_RESOLVE configurations to be an array of strings, those strings containing a comma delimited list of resolved IPs for each host:port combination. The original code here does create that array with the host:port:ip combination, but multiple ips for a single host:port result in additional array entries, rather than adding them to the end of the string with a comma. Per the libcurl docs, the `CURLOPT_RESOLVE` array entries should match the syntax `host:port:address[,address]`. This creates a function-scoped associative array which uses `host:port` as the key (which are supposed to be unique and this ensures that), and the value is an array containing IP strings (ipv4 or ipv6). Once the associative array is populated, it is then set to the CURLOPT_RESOLVE array, imploding the ip arrays using a comma delimiter so the array syntax matches the expected by libcurl. Note that this reorders the "foreach ip" and "foreach port" loops. Rather than looping over ips then ports, we now loop over ports then ips, since ports are part of the unique host:port map, and multiple ips can exist therein. Signed-off-by: Aaron Ball <nullspoon@oper.io>	3 years ago
John Molakvoæ (skjnldsv)	215aef3cbd	Update php licenses Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	3 years ago
Arthur Schiwon	9f5480eef4	ensure redis returns bool for hasKey Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	3 years ago
Lukas Reschke	5fe1f134f9	Strictify null check Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	3 years ago
Lukas Reschke	5f3abffe6f	Improve networking checks Whilst we currently state that SSRF is generally outside of our threat model, this is something where we should invest to improve this. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	3 years ago
Christoph Wurst	aabd73912e	Type the service registration Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Marco Ziech	4923c6be25	Use RFC-compliant URL encoding for cookies PHP 7.4.2 changed the way how cookies are decoded, applying RFC-compliant raw URL decoding. This leads to a conflict Nextcloud's own cookie encoding, breaking the remember-me function if the UID contains a space character. Fixes #24438 Signed-off-by: Marco Ziech <marco@ziech.net>	3 years ago
Roeland Jago Douma	41c80d6c19	Fix option in the client code itself as well Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	3 years ago
Christoph Wurst	9ce3ea3368	Update license headers Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Christoph Wurst	d89a75be0b	Update all license headers for Nextcloud 21 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Christoph Wurst	6995223b1e	Add well known handlers API Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Carlos Ferreira	a42eb05a35	Simple typo in comments	3 years ago
Roeland Jago Douma	54b9f639a6	Always return the default path if we can Just check in the certifcate manager. So every part of the system that request the certificatebundle gets the defaullt one (the 99% case) if we can. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	3 years ago
Christoph Wurst	2a054e6c04	Update the license headers for Nextcloud 20 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Joas Schilling	9127731c52	parse_url returns null in case a parameter is not found Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
Morris Jobke	18b0d753f2	Do not read certificate bundle from data dir by default Before the resources/config/ca-bundle.crt was only used when the list of custom certificates was empty and the instance was not installed. But it should also be used when the list is empty and the instance is installed. This is inverting the logic to stop if the instance is not installed to use the default bundle. And it also does this when the list is empty. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	4 years ago
Morris Jobke	8bcd1c31da	Allow gzip encoded requests by default Signed-off-by: Morris Jobke <hey@morrisjobke.de>	4 years ago
Christoph Wurst	cb057829f7	Update license headers for 19 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	4 years ago
Joas Schilling	5e402f8aae	Check all remotes for local access Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
Christoph Wurst	28f8eb5dba	Add visibility to all constants Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	4 years ago
Christoph Wurst	caff1023ea	Format control structures, classes, methods and function To continue this formatting madness, here's a tiny patch that adds unified formatting for control structures like if and loops as well as classes, their methods and anonymous functions. This basically forces the constructs to start on the same line. This is not exactly what PSR2 wants, but I think we can have a few exceptions with "our" style. The starting of braces on the same line is pracrically standard for our code. This also removes and empty lines from method/function bodies at the beginning and end. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	4 years ago
Christoph Wurst	14c996d982	Use elseif instead of else if Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	4 years ago
Christoph Wurst	1a9330cd69	Update the license headers for Nextcloud 19 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	4 years ago
Mohammed Abdellatif	98d6415264	Add support for GuzzleHTTP 'no' proxy The custom config allows to setup a proxy URI that is passed to GuzzleHTTP client as request options. Guzzle has the option to receive an array of proxies for each URI scheme as well as 'no' key value pair to provide a list of host names that should not be proxied to. Guzzle would automatically populate these options with HTTPS_PROXY and NO_PROXY environment variables. However, when providing a 'proxy' request option, default values will be overriden and it is required to explicitly provide the 'no' value if needed. More info: http://docs.guzzlephp.org/en/stable/request-options.html#proxy This commit will add support for a new config 'proxyexclude', which takes a list of host names to be excluded. It will also provide 'proxy' request option as an array instead of a string to Guzzle, and populate 'http' and 'https' URI schemes with proxy URI, and 'no' with 'proxyexclude' list. Also, if no 'proxy' is configured, it will leave out 'proxy' request option, so it won't override Guzzle default values. Sample config file includes a hint on how to explicitly sync 'proxyexclude' with NO_PROXY, and a note about default values. Signed-off-by: Mohammed Abdellatif <m.latief@gmail.com>	4 years ago
Christoph Wurst	5bf3d1bb38	Update license headers Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	4 years ago
Roeland Jago Douma	ca2623e6ad	Set a default request timeout This to avoid endless running processes. A default timeout of 30 seconds should cover the 99% case. If a job need specific longer time it should set that. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	4 years ago
Scott Shambarger	edf946dfc7	Correctly handle emtpy string in proxyuserpwd config As documented, the default value for config value proxyuserpwd is ''. However, that value results in the error: "cURL error 5: Unsupported proxy syntax in '@'". This patch handles the values of '' and null (the default in the code) the same for config values proxyuserpwd and proxy. Signed-off-by: Scott Shambarger <devel@shambarger.net>	5 years ago
Daniel Kesselberg	fd1d85365c	Refactor getProxyUri Get proxyuserpwd only if proxy not empty. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	5 years ago
Daniel Kesselberg	2708d26407	Set User-Agent as header without middleware Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	5 years ago
Roeland Jago Douma	08970aaee2	HttpClient getHeader can return empty string Fixes #11999 Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Roeland Jago Douma	9a7265babf	Make authenticated cookies lax This protects our cookies a bit more. It makes sure that when a 3rdparty websites embededs a public alendar for example. That all the users see this in anonymous mode there. It adds a small helper function. In the future we can think about protecting other cookies like this as well. But for now this is sufficient to not have the user logged in at all when doing 3rdparty requests. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Daniel Calviño Sánchez	00c3a7eb4c	Fix HTTP client given options being overriden by default options According to the array_merge documentation, "If the input arrays have the same string keys, then the later value for that key will overwrite the previous one." Thus, the default options must be the first parameter passed to array_merge. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>	6 years ago
Robin Appelman	fe23bb5916	adjust post body for new guzzle Signed-off-by: Robin Appelman <robin@icewind.nl>	6 years ago
Robin Appelman	9b25ff9fcb	adjust httpclient to guzzle6 Signed-off-by: Robin Appelman <robin@icewind.nl>	6 years ago
Roeland Jago Douma	a345605ec1	Make OCP\Http strict * Handle private files * Add return types * Add scalar typehints * Made strict * Fixed requiring proper guzzle message interface that is passed around Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Lukas Reschke	5679f04cb1	Rebrand to "Nextcloud" and add 100% coverage Noticed while debugging https://github.com/nextcloud/server/issues/2910 Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	7 years ago
Joas Schilling	0215b004da	Update with robin	8 years ago
Joas Schilling	ba87db3fcc	Fix others	8 years ago
Lukas Reschke	aba539703c	Update license headers	8 years ago
Robin Appelman	ea0f09a7ed	only configure the http client once we start using it	8 years ago
Roeland Jago Douma	0b69cd1120	Move \OC\Http to PSR-4	8 years ago

47 Commits (6e906dedc67dde6d88420fb3a5e891b8231a4bd8)