| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |\
| |
| | |
[scrutinizer] Increase timeout of external code coverage
|
| | |
| |
| | |
Hopefully fixes problems with unfinished scrutinizer reports
|
| |\ \
| |/
|/| |
Fix indentation
|
| | | |
|
| |\ \
| |/
|/| |
fix theme in IE8 and IE9
|
| | | |
|
| |\ \
| | |
| | | |
End processing when file is not found
|
| | | |
| | |
| | |
| | |
| | |
| | | |
We have to end the processing when a file is not found or otherwise the method is proceeding and even sending invalid file paths to the sendfile methods.
Due to nginx preventing directory traversals this is luckily not immediately exploitable. We should for hardening purposes however quit the script execution just as we do for 403 cases and others as well.
|
| | | | |
|
| |\ \ \
| | | |
| | | | |
[enc2] fix references to legacy encryption app name
|
| | | | | |
|
| | | | |
| | | |
| | | |
| | | | |
this will be handled in the wrapper now
|
| | | |/
| |/| |
|
| |\ \ \
| | | |
| | | | |
Add check for availability of /dev/urandom
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Without /dev/urandom being available to read the medium RNG will rely only on the following components on a Linux system:
1. MicroTime: microtime() . memory_get_usage() as seed and then a garbage collected microtime for loop
2. MTRand: chr((mt_rand() ^ mt_rand()) % 256)
3. Rand: chr((rand() ^ rand()) % 256)
4. UniqId: Plain uniqid()
An adversary with the possibility to predict the seed used by the PHP process may thus be able to predict future tokens which is an unwanted behaviour.
One should note that this behaviour is documented in our documentation to ensure that users get aware of this even without reading our documentation this will add a post setup check to the administrative interface.
Thanks to David Black from d1b.org for bringing this again to our attention.
|
| |\ \ \ \
| | | | |
| | | | | |
add example theme
|
| | | | | | |
|
| |\ \ \ \ \
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
owncloud/revert-16562-revert-15203-revert-15201-webdav-ng-bugfix
Revert "Revert "Revert "FIX for webdav.mediencenter.t-online.de"""
|
| |/ / / / / |
|
| |\ \ \ \ \
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
owncloud/revert-15203-revert-15201-webdav-ng-bugfix
FIX for webdav.mediencenter.t-online.de
https://webdav.mediencenter.t-online.de returns invalid response code.
e.g.
{"reqId":"f9a1c394b98108e4e5ca62bf47829c64","remoteAddr":"81.189.45.224","app":"PHP","message":"Undefined offset: 2 at \/var\/www\/owncloud\/3rdparty\/sabre\/dav\/lib\/Sabre\/DAV\/Client.php#569","level":3,"time":"2015-03-25T18:25:48+00:00","method":"GET","url":"\/index.php\/apps\/files\/ajax\/getstoragestats.php?dir=External%2FT-Cloud%2FTests"}
e.g.
{"reqId":"3407d66672b3cef206b0af883e49bff4","remoteAddr":"46.74.125.245","app":"PHP","message":"Undefined index: {DAV:}getlastmodified at \/var\/www\/owncloud\/lib\/private\/files\/storage\/dav.php#563","level":3,"time":"2015-03-25T16:33:21+00:00"}
|
| |/ / / / / |
|
| |\ \ \ \ \
| | | | | |
| | | | | | |
use normal font weight instead of bold for image placeholders
|
| | | |_|_|/
| |/| | | |
|
| |\ \ \ \ \
| | | | | |
| | | | | | |
Add connection timeout to default POST options
|
| | | |_|/ /
| |/| | |
| | | | |
| | | | | |
Fixes https://github.com/owncloud/core/issues/16560
|
| |\ \ \ \ \
| | | | | |
| | | | | | |
Deprecate useless helper class
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | | |
The helper class has no real reason anymore with 8.1.0 as we now have better public APIs. No need for an `IHelper` class like that from my opinion.
|
| |\ \ \ \ \ \
| | | | | | |
| | | | | | | |
use arrow icon for external link to Apps dev docs, like in Help section
|
| | | |_|_|/ /
| |/| | | | |
|
| |\ \ \ \ \ \
| | | | | | |
| | | | | | | |
fix float spinner position
|
| | |/ / / / / |
|
| |\ \ \ \ \ \
| | | | | | |
| | | | | | | |
Disallow cookie auth for cors requests
|
| | | |_|/ / /
| |/| | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
testing ...
fixes
fix test
add php doc
fix small mistake
add another phpdoc
remove not working cors annotations from files app
|
| |\ \ \ \ \ \
| | | | | | |
| | | | | | | |
always write file, if fseek doesn't work we write the whole file
|
| | | | | | | | |
|
| | | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
against the unencrypted file size
|
| | | | | | | | |
|
| | | | | | | | |
|
| |\ \ \ \ \ \ \
| | | | | | | |
| | | | | | | | |
Allow change update channel via public API
|
| | | | | | | | | |
|
| | | | | | | | | |
|
| | | | | | | | | |
|
| | | | | | | | | |
|
| | | | | | | | | |
|
| | | | | | | | | |
|
| |\ \ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | | |
Unit tests for #16511
|
| | | |_|/ / / / /
| |/| | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
Make sure that password is updated on focusout of the password field or
on pressing enter in the password field.
|
| |\ \ \ \ \ \ \ \
| |/ / / / / / /
|/| | | | | | | |
remove part file extension before we read a filekey
|
| | | |_|_|_|/ /
| |/| | | | |
| | | | | | |
| | | | | | | |
if possible, otherwise stuff like versioning will break
|
| |\ \ \ \ \ \ \
| | | | | | | |
| | | | | | | | |
Get correct mimetype when moving and changing extension
|
