nextcloud

Commit Graph

Автор	SHA1	Съобщение	Дата
Roeland Jago Douma	0e5147f001	Fix tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 5 години
Oliver Wegner	401ca28f07	Adding handling of CIDR notation to trusted_proxies for IPv4 Signed-off-by: Oliver Wegner <void1976@gmail.com>	преди 5 години
Roeland Jago Douma	579822b6a5	Add report-uri to CSP Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 5 години
Roeland Jago Douma	5b61ef9213	Disallow unsafe-eval by default Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 5 години
Roeland Jago Douma	8c1e75e052	Do not use file as template parameter Using file will overwrite the $file parameter in the template base. Leading to trying to include a file that is the exception message. Which will of course fail. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 6 години
Roeland Jago Douma	5455045a9b	Fix direct access to authen page Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 6 години
Roeland Jago Douma	1bb8bc8ff9	Add AuthPublicShareControllerTest Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 6 години
Roeland Jago Douma	61e445da88	Add PublicShareControllerTests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 6 години
Roeland Jago Douma	e7338173e8	Add PublicShareMiddlewareTest Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 6 години
Roeland Jago Douma	a34495933e	Move caching logic to response This avoids having to do it at all the places we want cached responses. We can't inject the ITimeFactor without breaking public API. However we can perfectly overwrite the service (resulting in the same testable effect). Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 6 години
Roeland Jago Douma	3ad7daeda5	Add tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 6 години
Roeland Jago Douma	d179186430	Remove testcase Since a token now always requires a string we don't need to test for null Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 6 години
Julius Härtl	5a4aa2b7dd	Add test for PublicTemplateResponse Signed-off-by: Julius Härtl <jus@bitgrid.net>	преди 6 години
Morris Jobke	cf35c4b03a	Provide translated error message for permission error Signed-off-by: Morris Jobke <hey@morrisjobke.de>	преди 6 години
Roeland Jago Douma	0ee45d3d20	Fix proper types Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 6 години
Roeland Jago Douma	ca9f364fd4	Fix tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 6 години
Roeland Jago Douma	7405dfb544	Update tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 6 години
Joas Schilling	bf2be08c9f	Fix risky tests without assertions Signed-off-by: Joas Schilling <coding@schilljs.com>	преди 6 години
Joas Schilling	870023365c	Fix "Undefined method setExpectedException()" Signed-off-by: Joas Schilling <coding@schilljs.com>	преди 6 години
Morris Jobke	2a38605545	Properly log the full exception instead of only the message Signed-off-by: Morris Jobke <hey@morrisjobke.de>	преди 6 години
Morris Jobke	c70927eaa0	Remove not needed 3rdparty app disabling during upgrade for PHP 5.x Signed-off-by: Morris Jobke <hey@morrisjobke.de>	преди 6 години
Joas Schilling	7bc9a69c3f	Remove deprecated core API Signed-off-by: Joas Schilling <coding@schilljs.com>	преди 6 години
Roeland Jago Douma	57050146f6	Move passwordconfirmation to its own midleware Add tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 6 години
Bjoern Schiessle	1bcbeb24bc	disable password confirmation with SSO Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	преди 6 години
Bjoern Schiessle	f0202245ee	allow 'Nextcloud' in the user agent string of Android Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	преди 6 години
Morris Jobke	43e498844e	Use ::class in test mocks Signed-off-by: Morris Jobke <hey@morrisjobke.de>	преди 6 години
Morris Jobke	ce0c45a4ea	Use proper DI for security middleware for app enabled check Signed-off-by: Morris Jobke <hey@morrisjobke.de>	преди 6 години
Roeland Jago Douma	c257cd57d4	Handle SameSiteCookie check for index.php in AppFramework Middleware Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 6 години
Thomas Citharel	ecf347bd1a	Add CSP frame-ancestors support Didn't set the @since annotation yet. Signed-off-by: Thomas Citharel <tcit@tcit.fr>	преди 7 години
Lukas Reschke	f93a82b8b0	Remove explicit type hints for Controller This is public API and breaks the middlewares of existing apps. Since this also requires maintaining two different code paths for 12 and 13 I'm at the moment voting for reverting this change. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	преди 7 години
Roeland Jago Douma	f71dc7523f	Fix tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 7 години
Roeland Jago Douma	3548603a88	Fix middleware implementations signatures Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 7 години
Lukas Reschke	f22ab3e665	Add metadata to \OCP\AppFramework\Http\Response::throttle Fixes https://github.com/nextcloud/server/issues/5891 Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	преди 7 години
Roeland Jago Douma	0b495ceff8	Remove deprecated Controller Functions Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 7 години
Lukas Reschke	8149945a91	Make BruteForceProtection annotation more clever This makes the new `@BruteForceProtection` annotation more clever and moves the relevant code into it's own middleware. Basically you can now set `@BruteForceProtection(action=$key)` as annotation and that will make the controller bruteforce protected. However, the difference to before is that you need to call `$responmse->throttle()` to increase the counter. Before the counter was increased every time which leads to all kind of unexpected problems. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	преди 7 години
Lukas Reschke	31ae39c569	Add tests for multiple parameters Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	преди 7 години
Lukas Reschke	a1ae5275f9	Move to dedicated MiddleWare Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	преди 7 години
Lukas Reschke	66835476b5	Add support for ratelimiting via annotations This allows adding rate limiting via annotations to controllers, as one example: ``` @UserRateThrottle(limit=5, period=100) @AnonRateThrottle(limit=1, period=100) ``` Would mean that logged-in users can access the page 5 times within 100 seconds, and anonymous users 1 time within 100 seconds. If only an AnonRateThrottle is specified that one will also be applied to logged-in users. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	преди 7 години
Roeland Jago Douma	2a9192334e	Don't try to parse empty body if there is no body Fixes #3890 If we do a put request without a body the current code still tries to read the body. This patch makes sure that we do not try to read the body if the content length is 0. See RFC 2616 Section 4.3 Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 7 години
Morris Jobke	f9bc53146d	Fix unit tests Signed-off-by: Morris Jobke <hey@morrisjobke.de>	преди 7 години
Roeland Jago Douma	21641302a9	Add DI intergration tests * Moved some interface definitions to Server.php (more to come) * Build/Query only for existing classes in the AppContainer * Build/Query only for classes of the App in the AppContainer * Offload other stuff to the servercontainer Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 7 години
Roeland Jago Douma	7cece61ff6	Extend DI tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	преди 7 години
Lukas Reschke	5f8f29508f	Adjust tests to include base-uri Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	преди 7 години
Lukas Reschke	adfd1e63f6	Add base-uri to CSP policy As per https://twitter.com/we1x/status/842032709543333890 a nice security hardening Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	преди 7 години
Robin Appelman	9a8cef965f	add test for skipping cookie checks for ocs Signed-off-by: Robin Appelman <robin@icewind.nl>	преди 7 години
Christoph Wurst	5e728d0eda	oc_token should be nc_token Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	преди 7 години
Bjoern Schiessle	0271ae3b46	add some unit tests Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	преди 7 години
Christoph Wurst	45c6301772	fix controller test Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	преди 7 години
Christoph Wurst	e3815b382d	fix data response test expected cache headers Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	преди 7 години
Christoph Wurst	fe6416072d	set 'no-store' cache header if we do not want FF to cache Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	преди 7 години

1 2

91 Ревизии (d17b32afd713f9f94ea24eba2ba7a753b3270e44)