| Commit message (Collapse) | Author | Age | Files | Lines |
|\
| |
| | |
Add check for availability of /dev/urandom
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Without /dev/urandom being available to read the medium RNG will rely only on the following components on a Linux system:
1. MicroTime: microtime() . memory_get_usage() as seed and then a garbage collected microtime for loop
2. MTRand: chr((mt_rand() ^ mt_rand()) % 256)
3. Rand: chr((rand() ^ rand()) % 256)
4. UniqId: Plain uniqid()
An adversary with the possibility to predict the seed used by the PHP process may thus be able to predict future tokens which is an unwanted behaviour.
One should note that this behaviour is documented in our documentation to ensure that users get aware of this even without reading our documentation this will add a post setup check to the administrative interface.
Thanks to David Black from d1b.org for bringing this again to our attention.
|
|\ \
| | |
| | | |
add example theme
|
| | | |
|
|\ \ \
| | | |
| | | |
| | | |
| | | | |
owncloud/revert-16562-revert-15203-revert-15201-webdav-ng-bugfix
Revert "Revert "Revert "FIX for webdav.mediencenter.t-online.de"""
|
|/ / / |
|
|\ \ \
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
owncloud/revert-15203-revert-15201-webdav-ng-bugfix
FIX for webdav.mediencenter.t-online.de
https://webdav.mediencenter.t-online.de returns invalid response code.
e.g.
{"reqId":"f9a1c394b98108e4e5ca62bf47829c64","remoteAddr":"81.189.45.224","app":"PHP","message":"Undefined offset: 2 at \/var\/www\/owncloud\/3rdparty\/sabre\/dav\/lib\/Sabre\/DAV\/Client.php#569","level":3,"time":"2015-03-25T18:25:48+00:00","method":"GET","url":"\/index.php\/apps\/files\/ajax\/getstoragestats.php?dir=External%2FT-Cloud%2FTests"}
e.g.
{"reqId":"3407d66672b3cef206b0af883e49bff4","remoteAddr":"46.74.125.245","app":"PHP","message":"Undefined index: {DAV:}getlastmodified at \/var\/www\/owncloud\/lib\/private\/files\/storage\/dav.php#563","level":3,"time":"2015-03-25T16:33:21+00:00"}
|
|/ / / |
|
|\ \ \
| | | |
| | | | |
use normal font weight instead of bold for image placeholders
|
| | | | |
|
|\ \ \ \
| | | | |
| | | | | |
Add connection timeout to default POST options
|
| | |_|/
| |/| |
| | | |
| | | | |
Fixes https://github.com/owncloud/core/issues/16560
|
|\ \ \ \
| | | | |
| | | | | |
Deprecate useless helper class
|
| | | | |
| | | | |
| | | | |
| | | | | |
The helper class has no real reason anymore with 8.1.0 as we now have better public APIs. No need for an `IHelper` class like that from my opinion.
|
|\ \ \ \ \
| | | | | |
| | | | | | |
use arrow icon for external link to Apps dev docs, like in Help section
|
| | |_|_|/
| |/| | | |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
fix float spinner position
|
| |/ / / / |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Disallow cookie auth for cors requests
|
| | |_|/ /
| |/| | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
testing ...
fixes
fix test
add php doc
fix small mistake
add another phpdoc
remove not working cors annotations from files app
|
|\ \ \ \ \
| | | | | |
| | | | | | |
always write file, if fseek doesn't work we write the whole file
|
| | | | | | |
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
against the unencrypted file size
|
| | | | | | |
|
| | | | | | |
|
|\ \ \ \ \ \
| | | | | | |
| | | | | | | |
Allow change update channel via public API
|
| | | | | | | |
|
| | | | | | | |
|
| | | | | | | |
|
| | | | | | | |
|
| | | | | | | |
|
| | | | | | | |
|
|\ \ \ \ \ \ \
| | | | | | | |
| | | | | | | | |
Unit tests for #16511
|
| | |_|/ / / /
| |/| | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Make sure that password is updated on focusout of the password field or
on pressing enter in the password field.
|
|\ \ \ \ \ \ \
| |/ / / / / /
|/| | | | | | |
remove part file extension before we read a filekey
|
| | |_|_|_|/
| |/| | | |
| | | | | |
| | | | | | |
if possible, otherwise stuff like versioning will break
|
|\ \ \ \ \ \
| | | | | | |
| | | | | | | |
Get correct mimetype when moving and changing extension
|
| | |_|_|/ /
| |/| | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Fixes issue when restoring folders from trash cross-storage, as such
folders have an extension ".d12345678".
Fixes issue when moving folders between storages and at the same time
changing their extension.
|
|\ \ \ \ \ \
| | | | | | |
| | | | | | | |
Fix PHPDoc
|
| | |_|_|_|/
| |/| | | |
| | | | | |
| | | | | | |
Use correct parameters
|
| |_|/ / /
|/| | | | |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Fix PHPDoc :see_no_evil:
|
| |/ / / /
| | | | |
| | | | |
| | | | | |
*sigh*
|
|\ \ \ \ \
| | | | | |
| | | | | | |
occ option to update all third party apps without disable
|
| | |/ / /
| |/| | | |
|
| | | | | |
|
|\ \ \ \ \
| |/ / / /
|/| | | |
| | | | |
| | | | | |
oparoz/restore-minheight-for-single-public-previews
Restore min-height for single previews
|
| | | | | |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
dont go trough the view when moving to trash
|
| | | | | | |
|