Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Set oc_token to httponly | Lukas Reschke | 2012-10-16 | 1 | -1/+1 | |
| | ||||||
* | Use /dev/urandom instead of /dev/random | Lukas Reschke | 2012-10-15 | 1 | -5/+5 | |
| | | | | The usage of /dev/urandom is enough secure | |||||
* | Show a warning in the installer if no secure RNG is available | Lukas Reschke | 2012-10-14 | 3 | -3/+35 | |
| | ||||||
* | Fallback to /dev/random if openssl_random_pseudo_bytes not available | Lukas Reschke | 2012-10-14 | 1 | -6/+14 | |
| | ||||||
* | Doublehash the token to prevent timing attacks | Lukas Reschke | 2012-10-14 | 2 | -3/+3 | |
| | ||||||
* | Sanitize file names | Lukas Reschke | 2012-10-12 | 1 | -1/+1 | |
| | ||||||
* | Sanitize file names | Lukas Reschke | 2012-10-12 | 1 | -2/+2 | |
| | ||||||
* | escapeHTML function | Lukas Reschke | 2012-10-12 | 1 | -0/+9 | |
| | ||||||
* | Update FullCalendar to 1.5.4 | Lukas Reschke | 2012-10-12 | 5 | -34/+30 | |
| | ||||||
* | Don't try to add invalid cards via CardDAV. | Thomas Tanghus | 2012-10-11 | 1 | -0/+3 | |
| | ||||||
* | 4.0.8v4.0.8 | Frank Karlitschek | 2012-10-09 | 1 | -3/+3 | |
| | ||||||
* | destroy invalid sessions | Arthur Schiwon | 2012-10-08 | 1 | -10/+14 | |
| | ||||||
* | Remove the webodf sources | Lukas Reschke | 2012-10-06 | 281 | -105051/+5 | |
| | | | | This is a backport of 683a0c1 /cc @DeepDiver1975 | |||||
* | Sanitize user input | Lukas Reschke | 2012-10-06 | 1 | -3/+3 | |
| | | | | This is a backport of 4f7c7c6 /cc @DeepDiver1975 | |||||
* | Use openssl_random_pseudo_bytes if available | Lukas Reschke | 2012-10-06 | 3 | -6/+28 | |
| | | | | This is a backport of ef57e92 /cc @DeepDiver1975 | |||||
* | Trim trailing whitespace from version. | Thomas Tanghus | 2012-09-26 | 1 | -1/+1 | |
| | ||||||
* | fix default values in table fscache | Arthur Schiwon | 2012-09-26 | 1 | -8/+4 | |
| | ||||||
* | Passwords containing a ":" don't work with this explode | Lukas Reschke | 2012-09-25 | 1 | -2/+2 | |
| | | | | Thanks to mETz | |||||
* | Sanitize user input | Lukas Reschke | 2012-09-22 | 1 | -2/+2 | |
| | ||||||
* | Don't store users password hash when exporting. | Tom Needham | 2012-09-19 | 1 | -13/+1 | |
| | ||||||
* | Only try to delete migration.db if it was created. | Tom Needham | 2012-09-18 | 1 | -10/+14 | |
| | ||||||
* | Allow exporting of users from any user backend, fixed oc-1645 | Tom Needham | 2012-09-18 | 1 | -10/+4 | |
| | ||||||
* | LDAP: transliterate other latin characters to ASCII when creating owncloud ↵ | Arthur Schiwon | 2012-09-18 | 1 | -0/+4 | |
| | | | | names. Already created usernames are not being affected. Fixes ugly names with removed Umlauts, chars with accents and likes. | |||||
* | Fix for cyrillic folder names. ref#oc-1683 | Victor Dubiniuk | 2012-09-11 | 1 | -1/+1 | |
| | ||||||
* | Merge pull request #11 from ne704/typos | Lukas Reschke | 2012-09-10 | 1 | -1/+1 | |
|\ | | | | | fix message about 'apps' directory | |||||
| * | fix message about 'apps' directory | Niko Ehrenfeuchter | 2012-09-10 | 1 | -1/+1 | |
| | | ||||||
* | | Merge pull request #10 from ne704/typos | Lukas Reschke | 2012-09-10 | 2 | -16/+16 | |
|\| | | | | | Typos | |||||
| * | mark unused variables | Niko Ehrenfeuchter | 2012-09-10 | 1 | -2/+2 | |
| | | ||||||
| * | fix typos | Niko Ehrenfeuchter | 2012-09-10 | 1 | -2/+2 | |
| | | ||||||
| * | fix typos + copy-paste errors in comments | Niko Ehrenfeuchter | 2012-09-10 | 2 | -12/+12 | |
| | | ||||||
* | | back port better input validation in calendar from apps repo | Georg Ehrke | 2012-08-31 | 1 | -1/+7 | |
| | | ||||||
* | | LDAP: check for existing username from other backends when creating one for ↵ | Arthur Schiwon | 2012-08-29 | 2 | -24/+31 | |
| | | | | | | | | an LDAP user or group. Fixes oc-1551 in stable4. Also optimizes groupExists() function as side effect. | |||||
* | | Gitorious => Github | Lukas Reschke | 2012-08-26 | 1 | -1/+1 | |
| | | ||||||
* | | I like TLS/SSL | Lukas Reschke | 2012-08-26 | 1 | -5/+4 | |
| | | ||||||
* | | Sanitizing the user input to prevent a reflected XSS. Thanks to Nico Golde ↵ | Lukas Reschke | 2012-08-21 | 1 | -38/+38 | |
| | | | | | | | | (ngolde.de) | |||||
* | | Fix deletion for browser that do not support onBeforeUnload, fixes oc-1534 | Arthur Schiwon | 2012-08-20 | 1 | -12/+18 | |
| | | ||||||
* | | Add a missing exit(); | Lukas Reschke | 2012-08-18 | 1 | -0/+1 | |
| | | ||||||
* | | Use SCRIPT_NAME instead of PHP_SELF which won't send the PATH_INFO, this ↵ | Lukas Reschke | 2012-08-18 | 1 | -1/+1 | |
| | | | | | | | | prevents XSS in old browsers. Thanks to Nico Golde. | |||||
* | | backport 1bccc80996e270f928c207cdd3090f4284abaea5 | Georg Ehrke | 2012-08-16 | 4 | -1/+10 | |
|/ | ||||||
* | 4.0.7v4.0.7 | Frank Karlitschek | 2012-08-14 | 1 | -14/+14 | |
| | | | | and remove some ^M while at it | |||||
* | Disable user enumeration | Lukas Reschke | 2012-08-14 | 2 | -8/+14 | |
| | ||||||
* | Check blacklist when renaming files | Michael Gapczynski | 2012-08-13 | 2 | -3/+12 | |
| | ||||||
* | Also check some other files | Lukas Reschke | 2012-08-13 | 1 | -1/+1 | |
| | ||||||
* | Disable listing of all users | Lukas Reschke | 2012-08-13 | 2 | -6/+13 | |
| | ||||||
* | Fix OC_Connector_Sabre_Locks for SQLite | Jakob Sack | 2012-08-12 | 1 | -2/+4 | |
| | ||||||
* | Check if webfinger is enabled | Lukas Reschke | 2012-08-10 | 2 | -1/+9 | |
| | ||||||
* | Don't return file handle if the mode supports writing and the file is not ↵ | Michael Gapczynski | 2012-08-10 | 1 | -0/+19 | |
| | | | | | | | writable Conflicts: apps/files_sharing/sharedstorage.php | |||||
* | Validate cookie to prevent auth bypasses. | Lukas Reschke | 2012-08-10 | 1 | -1/+1 | |
| | ||||||
* | Added XSRF check | Lukas Reschke | 2012-08-10 | 1 | -0/+1 | |
| | ||||||
* | Missed an "echo" | Lukas Reschke | 2012-08-09 | 1 | -1/+1 | |
| |