summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
* Set oc_token to httponlyLukas Reschke2012-10-161-1/+1
* Use /dev/urandom instead of /dev/randomLukas Reschke2012-10-151-5/+5
* Show a warning in the installer if no secure RNG is availableLukas Reschke2012-10-143-3/+35
* Fallback to /dev/random if openssl_random_pseudo_bytes not availableLukas Reschke2012-10-141-6/+14
* Doublehash the token to prevent timing attacksLukas Reschke2012-10-142-3/+3
* Sanitize file namesLukas Reschke2012-10-121-1/+1
* Sanitize file namesLukas Reschke2012-10-121-2/+2
* escapeHTML functionLukas Reschke2012-10-121-0/+9
* Update FullCalendar to 1.5.4Lukas Reschke2012-10-125-34/+30
* Don't try to add invalid cards via CardDAV.Thomas Tanghus2012-10-111-0/+3
* 4.0.8v4.0.8Frank Karlitschek2012-10-091-3/+3
* destroy invalid sessionsArthur Schiwon2012-10-081-10/+14
* Remove the webodf sourcesLukas Reschke2012-10-06281-105051/+5
* Sanitize user inputLukas Reschke2012-10-061-3/+3
* Use openssl_random_pseudo_bytes if availableLukas Reschke2012-10-063-6/+28
* Trim trailing whitespace from version.Thomas Tanghus2012-09-261-1/+1
* fix default values in table fscacheArthur Schiwon2012-09-261-8/+4
* Passwords containing a ":" don't work with this explodeLukas Reschke2012-09-251-2/+2
* Sanitize user inputLukas Reschke2012-09-221-2/+2
* Don't store users password hash when exporting.Tom Needham2012-09-191-13/+1
* Only try to delete migration.db if it was created.Tom Needham2012-09-181-10/+14
* Allow exporting of users from any user backend, fixed oc-1645Tom Needham2012-09-181-10/+4
* LDAP: transliterate other latin characters to ASCII when creating owncloud na...Arthur Schiwon2012-09-181-0/+4
* Fix for cyrillic folder names. ref#oc-1683Victor Dubiniuk2012-09-111-1/+1
* Merge pull request #11 from ne704/typosLukas Reschke2012-09-101-1/+1
|\
| * fix message about 'apps' directoryNiko Ehrenfeuchter2012-09-101-1/+1
* | Merge pull request #10 from ne704/typosLukas Reschke2012-09-102-16/+16
|\|
| * mark unused variablesNiko Ehrenfeuchter2012-09-101-2/+2
| * fix typosNiko Ehrenfeuchter2012-09-101-2/+2
| * fix typos + copy-paste errors in commentsNiko Ehrenfeuchter2012-09-102-12/+12
* | back port better input validation in calendar from apps repoGeorg Ehrke2012-08-311-1/+7
* | LDAP: check for existing username from other backends when creating one for a...Arthur Schiwon2012-08-292-24/+31
* | Gitorious => GithubLukas Reschke2012-08-261-1/+1
* | I like TLS/SSLLukas Reschke2012-08-261-5/+4
* | Sanitizing the user input to prevent a reflected XSS. Thanks to Nico Golde (n...Lukas Reschke2012-08-211-38/+38
* | Fix deletion for browser that do not support onBeforeUnload, fixes oc-1534Arthur Schiwon2012-08-201-12/+18
* | Add a missing exit();Lukas Reschke2012-08-181-0/+1
* | Use SCRIPT_NAME instead of PHP_SELF which won't send the PATH_INFO, this prev...Lukas Reschke2012-08-181-1/+1
* | backport 1bccc80996e270f928c207cdd3090f4284abaea5Georg Ehrke2012-08-164-1/+10
|/
* 4.0.7v4.0.7Frank Karlitschek2012-08-141-14/+14
* Disable user enumerationLukas Reschke2012-08-142-8/+14
* Check blacklist when renaming filesMichael Gapczynski2012-08-132-3/+12
* Also check some other filesLukas Reschke2012-08-131-1/+1
* Disable listing of all usersLukas Reschke2012-08-132-6/+13
* Fix OC_Connector_Sabre_Locks for SQLiteJakob Sack2012-08-121-2/+4
* Check if webfinger is enabledLukas Reschke2012-08-102-1/+9
* Don't return file handle if the mode supports writing and the file is not wri...Michael Gapczynski2012-08-101-0/+19
* Validate cookie to prevent auth bypasses.Lukas Reschke2012-08-101-1/+1
* Added XSRF checkLukas Reschke2012-08-101-0/+1
* Missed an "echo"Lukas Reschke2012-08-091-1/+1