| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
| |
|
|\
| |
| | |
Return remote shares in oc:share-types Webdav property
|
| |
| |
| |
| |
| | |
Fixes web UI to properly display the share status icon when an outgoing
remote share exists
|
|\ \
| | |
| | | |
Lock the mountpoint while removing
|
| | | |
|
|\ \ \
| | | |
| | | | |
dont die when we cant save the resized avatar, log instead
|
| | | | |
|
|\ \ \ \
| | | | |
| | | | | |
sidebar click modification
|
| | |/ /
| |/| | |
|
|\ \ \ \
| | | | |
| | | | | |
add missing var
|
| | | | | |
|
|\ \ \ \ \
| |/ / / /
|/| | | |
| | | | |
| | | | | |
owncloud/fix-group-sharing-for-v1-caldav-and-carddav
Fix group shares on v1 caldav and carddav
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
|\ \ \ \ \
| |_|/ / /
|/| | | |
| | | | |
| | | | | |
owncloud/catch-empty-app-path-oh-we-really-should-use-exceptions-in-the-future
getAppPath can return false
|
| |/ / /
| | | |
| | | |
| | | | |
Fixes https://github.com/owncloud/core/issues/23533
|
|\ \ \ \
| |/ / /
|/| | | |
Check if request is sent from official ownCloud client
|
|/ / /
| | |
| | |
| | |
| | |
| | | |
There are authentication backends such as Shibboleth that do send no Basic Auth credentials for DAV requests. This means that the ownCloud DAV backend would consider these requests coming from an untrusted source and require higher levels of security checks. (e.g. a CSRF check)
While an elegant solution would rely on authenticating via token (so that one can properly ensure that the request came indeed from a trusted client) this is a okay'ish workaround for this problem until we have something more reliable in the authentication code.
|
| | | |
|
|\ \ \
| | | |
| | | | |
Fix the translations of the User menu
|
| | | | |
|
|\ \ \ \
| | | | |
| | | | | |
Avoid fatal php error dring cron execution
|
| | | | | |
|
|\ \ \ \ \
| |_|_|_|/
|/| | | | |
[3rdparty] Bump symfony/polyfill packages
|
|/ / / / |
|
|\ \ \ \
| | | | |
| | | | | |
Query the cache when checking if a node exists
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
[3rdparty] Bump symfony/event-dispatcher
|
| | | | | | |
|
|\ \ \ \ \ \
| | | | | | |
| | | | | | | |
Fix display of vcard and calendar object details page in browser plugin
|
| | | | | | | |
|
|\ \ \ \ \ \ \
| | | | | | | |
| | | | | | | | |
Fix analyzer warnings in request.php
|
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
* Added proper @property tags
* RunTimeException => RuntimeException
Makes code analyzers happier
|
|\ \ \ \ \ \ \ \
| |_|_|/ / / / /
|/| | | | | | | |
Remove support for old shares in the default share provider
|
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
This was used when we did not have lazy shares yet. Now that we no
longer support legacy shares this can go.
|
| |/ / / / / /
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
In 9.0 we converted the old shares to the new shares. So for 9.1 we can
savely remove the fallback code.
This code was required when there was no initiator set.
* Fixed unit tests
|
|\ \ \ \ \ \ \
| | | | | | | |
| | | | | | | | |
Read available l10n files also from theme folder
|
| | | | | | | | |
|
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
The old behaviour was that only languages could be used for an app
that are already present in the apps/$app/l10n folder. If there is
a themed l10n that is not present in the apps default l10n folder
the language could not be used and the texts are not translated.
With this change this is possible and also the l10n files are
loaded even if the default l10n doesn't contain the l10n file.
|
|\ \ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | | |
Consistently use rel=noreferrer
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
When linking to external entities we should consistently use rel=noreferrer
|
|\ \ \ \ \ \ \ \ \
| |_|_|_|_|_|_|/ /
|/| | | | | | | | |
Disable pastezone for jquery.fileupload
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
jquery.fileupload offers the [`pastezone`](https://github.com/blueimp/jQuery-File-Upload/wiki/Options#pastezone) functionality. This functionality is enabled by default and if somebody copy-pastes something into Chrome it will automatically trigger an upload of the content to any configured jquery.fileupload element embedded in the JS.
This implementation triggers some problems:
1. The pastezone is defined globally by default (:see_no_evil:). So if there are multiple fileupload's on a page (such as in the personal settings) then stuff is going to be uploaded to all embedded uploads.
2. Our server code is not able to parse the data. For example for uploads in the files app we expect a file name which is not specified => Just an error is thrown. You can reproduce this by taking a file into your clipboard and in Chrome then pressing <kbd>CTRL + V</kbd>.
3. When copy-pasting some string from MS Office on the personal page a temporary avatar with said content is created.
Considering that this is anyways was never working at all and causes bugs I've set the `pastezone` to `null`. This mens that upload via copy and paste will be disabled.
Lesson learned: Third-party JS libraries can have some weird details.
|
|\ \ \ \ \ \ \ \ \
| |_|_|_|/ / / / /
|/| | | | | | | | |
Exclude lost+found dir in integrity check
|