aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* fixup! fixup! fixup! fix: Harden files scanner for invalid null accessfix/encoding-wrapper-scannerFerdinand Thiessen8 days1-5/+2
|
* fixup! fixup! fix: Harden files scanner for invalid null accessFerdinand Thiessen8 days4-6/+7
|
* fixup! fix: Harden files scanner for invalid null accessFerdinand Thiessen9 days1-5/+5
|
* fixup! fix: Harden files scanner for invalid null accessFerdinand Thiessen9 days1-1/+1
|
* fix: Harden files scanner for invalid null accessFerdinand Thiessen9 days7-177/+173
| | | | | | Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Kate <26026535+provokateurin@users.noreply.github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* Merge pull request #50293 from nextcloud/fix/harden-admin-settingsAndy Scherzinger9 days6-17/+204
|\ | | | | fix(theming): Harden admin theming settings
| * chore: Compile assetsfix/harden-admin-settingsFerdinand Thiessen9 days2-3/+3
| | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
| * fix(theming): Ensure to only send valid URLs to backendFerdinand Thiessen9 days2-4/+178
| | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
| * fix(theming): Harden admin web link settingsFerdinand Thiessen9 days2-10/+23
| | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | Merge pull request #49645 from nextcloud/fix/noid/clean-config-codeMaxence Lange9 days2-4/+2
|\ \ | | | | | | fix(config): drop value details
| * | fix(config): drop value detailsfix/noid/clean-config-codeMaxence Lange10 days2-4/+2
| | | | | | | | | | | | Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
* | | Merge pull request #50446 from nextcloud/fix/unified-search-sizeFerdinand Thiessen9 days3-64/+51
|\ \ \ | | | | | | | | fix(unifiedsearch): Simplify and correct thumbnail styles
| * | | chore(assets): Recompile assetsnextcloud-command9 days2-3/+3
| | | | | | | | | | | | | | | | Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
| * | | fix(unifiedsearch): Simplify and correct thumbnail stylesFerdinand Thiessen9 days1-61/+48
|/ / / | | | | | | | | | | | | | | | | | | Ensure that the if a preview is available the maximum sizes are respected (clickable area). Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | | Merge pull request #45364 from nextcloud/fix/ldap-avoid-false-positive-mappingDaniel9 days2-4/+11
|\ \ \ | | | | | | | | fix(user_ldap): Do not map groups we do not know if they match filter
| * | | fix(user_ldap): Do not map groups we do not know if they match filterfix/ldap-avoid-false-positive-mappingCôme Chilliet9 days2-4/+11
| | |/ | |/| | | | | | | | | | | | | | | | | | | When nesting is enabled, filterValidGroups is supposed to check for each groups if it actually exist, because it may not be visible to Nextcloud. So in this codepath we disable automapping of groups. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* | | Merge pull request #50464 from nextcloud/fix/50215/hideCreateTemplateFolderAndy Scherzinger9 days5-12/+14
|\ \ \ | | | | | | | | Hide "Create templates folder" option if templates are disabled
| * | | chore(assets): Recompile assetsfix/50215/hideCreateTemplateFoldernextcloud-command9 days2-3/+3
| | | | | | | | | | | | | | | | Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
| * | | fix: Hide "Create templates folder" option if templates are disabled in ↵Pawel Boguslawski9 days3-9/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | configuration When both `skeletondirectory` and `templatedirectory` are set to empty strings in configuration, templates folder creation should be disabled and no Create templates folder option should be present in new folder menu. Related: https://github.com/nextcloud/server/issues/39266 Related: https://github.com/nextcloud/server/issues/46455 Author-Change-Id: IB#1156403 Signed-off-by: Pawel Boguslawski <pawel.boguslawski@ib.pl> Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
* | | | Merge pull request #50221 from ↵Kate9 days1-0/+27
|\ \ \ \ | |/ / / |/| | | | | | | nextcloud/add-integration-tests-for-moving-a-file-from-and-to-a-shared-folder
| * | | test: Add integration tests for moving a file from and to a shared folderadd-integration-tests-for-moving-a-file-from-and-to-a-shared-folderDaniel Calviño Sánchez9 days1-0/+27
| |/ / | | | | | | | | | Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
* | | Merge pull request #48581 from hammer065/fix/issue-35936Andy Scherzinger9 days2-7/+38
|\ \ \ | | | | | | | | fix: Filter for folders in cleanup old preview job
| * | | fix(preview): Filter for folders in cleanup old preview jobDario Mehlich9 days2-7/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes #35936. When running `OC\Preview\BackgroundCleanupJob`, the main iteration loop in `run()` expects a folder, however, `getOldPreviewLocations()` currently does not filter by mimetype and therefore can yield a non-folder entry which causes an Exception when constructing the Folder impl. Filtering for `httpd/unix-directory`, as `getNewPreviewLocations()` already does, fixes this issue. Signed-off-by: Dario Mehlich <d.mehlich@gmail.com>
* | | | Merge pull request #50234 from nextcloud/bugfix/noid/allow-ratelimit-bypassJoas Schilling9 days10-293/+246
|\ \ \ \ | |_|/ / |/| | | fix(ratelimit): Allow to bypass rate-limit from bruteforce allowlist
| * | | fix(ratelimit): Allow to bypass rate-limit from bruteforce allowlistbugfix/noid/allow-ratelimit-bypassJoas Schilling9 days10-293/+246
|/ / / | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | Merge pull request #50315 from nextcloud/chore/symfony-processFerdinand Thiessen9 days1-0/+0
|\ \ \ | | | | | | | | chore(3rdparty): Bump symfony/process from 6.4.12 to 6.4.15
| * | | chore(3rdparty): Bump symfony/process from 6.4.12 to 6.4.15chore/symfony-processFerdinand Thiessen9 days1-0/+0
|/ / / | | | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | | Merge pull request #50455 from nextcloud/bugfix/50443/fix-log-level-handlingDaniel9 days1-0/+1
|\ \ \ | | | | | | | | fix(log): Fix log level handling
| * | | fix(log): Fix log level handlingbugfix/50443/fix-log-level-handlingJoas Schilling9 days1-0/+1
| |/ / | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | Merge pull request #50298 from nextcloud/smb-hasupdated-deletedKate9 days1-1/+1
|\ \ \ | |/ / |/| |
| * | fix: detect deleted items as updated for smb storagesmb-hasupdated-deletedRobin Appelman2025-01-211-1/+1
| | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | Fix(l10n): Update translations from TransifexNextcloud bot9 days170-228/+484
| | | | | | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | Merge pull request #50425 from nextcloud/fix/openapi/outdated-specsAndy Scherzinger10 days3-513/+2
|\ \ \ | | | | | | | | Fix outdated OpenAPI specs
| * | | fix(settings): Add back adminstration scope for LogSettingsControllerfix/openapi/outdated-specsprovokateurin11 days1-0/+2
| | | | | | | | | | | | | | | | Signed-off-by: provokateurin <kate@provokateurin.de>
| * | | chore(federation): Remove outdated OpenAPI specprovokateurin11 days2-513/+0
| | | | | | | | | | | | | | | | Signed-off-by: provokateurin <kate@provokateurin.de>
* | | | Merge pull request #48672 from nextcloud/jtr-settings-memory-limit-detailsAndy Scherzinger10 days1-1/+1
|\ \ \ \ | | | | | | | | | | fix(settings): Add some context to the PHP memory limit error
| * | | | fix(settings): Add some context to the PHP memory limit errorjtr-settings-memory-limit-detailsJosh10 days1-1/+1
| | | | | | | | | | | | | | | Signed-off-by: Josh <josh.t.richards@gmail.com>
* | | | | Merge pull request #50447 from nextcloud/fix/share-labelAndy Scherzinger10 days3-4/+6
|\ \ \ \ \ | |/ / / / |/| | | | fix: Ensure `label` is always a string
| * | | | fix: Ensure `label` is always a stringFerdinand Thiessen10 days3-4/+6
|/ / / / | | | | | | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | | | Merge pull request #50430 from nextcloud/fix/harden-thumbnail-endpointAndy Scherzinger10 days3-6/+104
|\ \ \ \ | | | | | | | | | | files: harden thumbnail endpoint
| * | | | chore(files): Deprecate thumbnail endpoint in favor of core preview endpointfix/harden-thumbnail-endpointFerdinand Thiessen10 days2-0/+2
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
| * | | | fix(files): Harden thumbnail endpointFerdinand Thiessen10 days2-6/+102
| | |_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | - Catch all thrown exceptions and handle in such a way you do not get information about forbidden files. - Resepect download permissions of shares. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | | | Merge pull request #49440 from nextcloud/fix-setupcheck-webfinger-400Andy Scherzinger10 days1-1/+1
|\ \ \ \ | |/ / / |/| | | fix(SetupChecks): Pass webfinger if the handler returns 400 too
| * | | fix(SetupChecks): Pass webfinger if a handler is therefix-setupcheck-webfinger-400Josh10 days1-1/+1
|/ / / | | | | | | Signed-off-by: Josh <josh.t.richards@gmail.com>
* | | Merge pull request #48815 from nextcloud/automated/noid/master-fix-npm-auditKate10 days98-225/+286
|\ \ \
| * | | fix(deps): Fix npm auditautomated/noid/master-fix-npm-auditnextcloud-command10 days98-225/+286
|/ / / | | | | | | | | | Signed-off-by: GitHub <noreply@github.com>
* | | Fix(l10n): Update translations from TransifexNextcloud bot10 days116-92/+724
| | | | | | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | Merge pull request #50429 from ↵Ferdinand Thiessen11 days2-72/+137
|\ \ \ | | | | | | | | | | | | | | | | nextcloud/dependabot/npm_and_yarn/puppeteer-24.1.1 chore(deps-dev): bump puppeteer from 23.10.4 to 24.1.1
| * | | chore(deps-dev): bump puppeteer from 23.10.4 to 24.1.1dependabot[bot]11 days2-72/+137
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [puppeteer](https://github.com/puppeteer/puppeteer) from 23.10.4 to 24.1.1. - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md) - [Commits](https://github.com/puppeteer/puppeteer/compare/puppeteer-v23.10.4...puppeteer-v24.1.1) --- updated-dependencies: - dependency-name: puppeteer dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
* | | Merge pull request #50336 from ↵dependabot[bot]11 days2-10/+24
|\ \ \ | | | | | | | | | | | | nextcloud/dependabot/npm_and_yarn/babel/node-7.26.0