Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | remove $content parameter | Thomas Müller | 2015-03-02 | 1 | -7/+4 | |
| | ||||||
* | Remove "Download from URL" feature | Lukas Reschke | 2015-03-02 | 1 | -107/+14 | |
| | | | | Fixes https://github.com/owncloud/core/issues/13326 | |||||
* | Revert "Updating license headers" | Morris Jobke | 2015-02-26 | 11 | -269/+42 | |
| | | | | This reverts commit 6a1a4880f0d556fb090f19a5019fec31916f5c36. | |||||
* | Updating license headers | Jenkins for ownCloud | 2015-02-23 | 11 | -42/+269 | |
| | ||||||
* | Merge pull request #14199 from owncloud/cast-type-manually | Morris Jobke | 2015-02-19 | 11 | -24/+24 | |
|\ | | | | | Manually type-cast all AJAX files | |||||
| * | Do not change behaviour of 'false' | Joas Schilling | 2015-02-13 | 1 | -2/+2 | |
| | | ||||||
| * | Manually type-case all AJAX files | Lukas Reschke | 2015-02-13 | 11 | -26/+26 | |
| | | | | | | | | | | | | This enforces proper types on POST and GET arguments where I considered it sensible. I didn't update some as I don't know what kind of values they would support :see_no_evil: Fixes https://github.com/owncloud/core/issues/14196 for core | |||||
* | | Merge pull request #13505 from owncloud/streamline-scanning-code | Thomas Müller | 2015-02-19 | 1 | -1/+5 | |
|\ \ | | | | | | | Streamline auth and CSRF check in scan.php | |||||
| * | | Streamline auth and CSRF check in scan.php | Lukas Reschke | 2015-01-20 | 1 | -1/+5 | |
| | | | | | | | | | | | | Furthermore a not logged-in user was able to access this page before which resulted in a Fatal PHP error since the filesystem could not get setup properly. | |||||
* | | | Ensure that passed argument is always a string | Lukas Reschke | 2015-02-13 | 1 | -1/+1 | |
| |/ |/| | | | | | | | | | Some code paths called the `normalizePath` functionality with types other than a string which resulted in unexpected behaviour. Thus the function is now manually casting the type to a string and I corrected the usage in list.php as well. | |||||
* | | Merge pull request #13502 from owncloud/streamline-authentication-in-newfile | Morris Jobke | 2015-02-07 | 1 | -6/+3 | |
|\ \ | | | | | | | Streamline CSRF and login check | |||||
| * | | Streamline CSRF and login check | Lukas Reschke | 2015-01-20 | 1 | -6/+3 | |
| |/ | | | | | | | Let's make this consistent with other pieces of the code to make it easier to auditable. | |||||
* / | Catch exception properly | Lukas Reschke | 2015-02-04 | 1 | -1/+6 | |
|/ | | | | | | `\OCA\Files\Helper::buildFileStorageStatistics` might throw an exception from `OC_Helper::getStorageInfo`, previously this lead to a uncatched exception being thrown when invoking this methods. This was user triggable by for example calling `/index.php/apps/files/ajax/delete.php` with a not existing dir (for example `dir=asdf/../&allfiles=true`) | |||||
* | Remove stripslashes() from newfolder.php | Lukas Reschke | 2015-01-19 | 1 | -2/+1 | |
| | ||||||
* | Check for existence of $_GET keys | Lukas Reschke | 2015-01-14 | 1 | -2/+2 | |
| | | | | `$dir` may for example very well not get passed at well. | |||||
* | Get rid of `stripslashes()` | Lukas Reschke | 2015-01-13 | 5 | -9/+8 | |
| | | | | This conversions are actually totally unneeded and probably left-overs from ages where the safe_mode was still a valid thing. | |||||
* | Merge pull request #13279 from owncloud/upload-original-name | Morris Jobke | 2015-01-12 | 1 | -2/+2 | |
|\ | | | | | Send the proper original name for uploaded files | |||||
| * | Send the proper original name for uploaded files | Robin Appelman | 2015-01-12 | 1 | -2/+2 | |
| | | ||||||
* | | Check for existence of $_GET keys | Lukas Reschke | 2015-01-09 | 1 | -5/+5 | |
|/ | | | | Otherwise PHP errors are thrown in the error log. | |||||
* | Verify existence of $_GET key | Lukas Reschke | 2015-01-09 | 1 | -1/+3 | |
| | | | | | | | | Otherwise when the file without any specified mimetype was accessed the error log was flooded with entries such as "Undefined index: mime", there can be multiple issues found about this in the forum and our bugtracker. To test this access `/index.php/apps/files/ajax/mimeicon.php` with and without `$_GET['mime']`. Fixes itself. | |||||
* | Add error handling to getstoragestats.php | Robin Appelman | 2015-01-06 | 1 | -1/+5 | |
| | ||||||
* | Only populate tags in main file list | Vincent Petry | 2014-12-18 | 1 | -0/+1 | |
| | | | | | | Moved populateTags to be done on the main file list. This prevents the public file list to go through the same code and cause an error when there is no user. | |||||
* | Merge pull request #12698 from owncloud/handle_readonly_shared_files | Morris Jobke | 2014-12-12 | 1 | -6/+18 | |
|\ | | | | | Handle readonly shared files | |||||
| * | show readonly message in file conflict dialog, make it always selected | Jörn Friedrich Dreyer | 2014-12-11 | 1 | -6/+18 | |
| | | ||||||
* | | Skip headers that can not be split | Victor Dubiniuk | 2014-12-08 | 1 | -0/+3 | |
|/ | ||||||
* | Check if files are deletable before trying to delete them | Robin Appelman | 2014-11-26 | 1 | -1/+3 | |
| | ||||||
* | Merge pull request #12421 from ↵ | Morris Jobke | 2014-11-26 | 1 | -3/+3 | |
|\ | | | | | | | | | owncloud/issue/6101-remove-namespace-permission-constants Issue/6101 remove namespace permission constants | |||||
| * | Replace deprecated constant with new class constant | Joas Schilling | 2014-11-25 | 1 | -3/+3 | |
| | | ||||||
* | | we no longer need to keep the session open for encryption | Bjoern Schiessle | 2014-11-25 | 1 | -6/+2 | |
|/ | ||||||
* | Prevent division by zero | Lukas Reschke | 2014-10-24 | 1 | -1/+1 | |
| | | | | Potentially fixes https://github.com/owncloud/core/issues/11742 | |||||
* | log exceptions when listing files | Jörn Friedrich Dreyer | 2014-10-08 | 1 | -0/+3 | |
| | ||||||
* | Do only follow HTTP and HTTPS redirects | Lukas Reschke | 2014-09-22 | 1 | -2/+7 | |
| | | | | | | | | We do not want to follow redirects to other protocols since they might allow an adversary to bypass network restrictions. (i.e. a redirect to ftp:// might be used to access files of a FTP server which might be in a secure zone and not be reachable from the net but from the ownCloud server) Get final redirect manually using get_headers() Migrate to HTTPHelper class and add unit tests | |||||
* | Merge pull request #10922 from owncloud/explicit-scan-transactions | Lukas Reschke | 2014-09-09 | 1 | -1/+1 | |
|\ | | | | | Use bigger transactions when doing explicit file system scans | |||||
| * | Use bigger transactions when doing explicit file system scans | Robin Appelman | 2014-09-08 | 1 | -1/+1 | |
| | | ||||||
* | | Merge pull request #10739 from owncloud/eventsource-public | Lukas Reschke | 2014-09-08 | 2 | -4/+4 | |
|\ \ | | | | | | | Add EventSource to the public API | |||||
| * | | Better phpdoc and method naming | Robin Appelman | 2014-09-04 | 2 | -2/+2 | |
| | | | ||||||
| * | | Use the public api to get event sources | Robin Appelman | 2014-09-03 | 2 | -4/+4 | |
| |/ | ||||||
* / | Catch exceptions when moving files | Vincent Petry | 2014-09-05 | 1 | -4/+10 | |
|/ | | | | | | | | When moving files on storages that don't expose permissions, the storage itself might throw an exception when the permission is denied. This fix ensures that exceptions are caught and forwarded to the client instead of just hanging. | |||||
* | Use public api for getting l10n | Robin Appelman | 2014-08-31 | 6 | -6/+6 | |
| | ||||||
* | kill OC::$session | Jörn Friedrich Dreyer | 2014-08-29 | 11 | -11/+11 | |
| | | | | | | | | | | | | maintain deprecated \OC::$session when getting or setting the session via the server container or UserSession restore order os OC::$session and OC::$CLI remove unneded initialization of dummy session write back session when $useCustomSession is true log warning when deprecated app is used | |||||
* | set incognitoMode to true, getUser should always return false during public ↵ | Bjoern Schiessle | 2014-08-18 | 1 | -1/+3 | |
| | | | | upload | |||||
* | Merge pull request #10295 from owncloud/file_actions_error_handling | Björn Schießle | 2014-08-14 | 1 | -1/+2 | |
|\ | | | | | file actions improved error handling | |||||
| * | no error if we try to delete a file which no longer exists | Bjoern Schiessle | 2014-08-11 | 1 | -1/+2 | |
| | | ||||||
| * | no special action for folder named 'Shared' needed | Bjoern Schiessle | 2014-08-11 | 1 | -1/+1 | |
| | | ||||||
* | | check quota when trying to download a file via new -> web | Jörn Friedrich Dreyer | 2014-08-08 | 1 | -0/+23 | |
|/ | ||||||
* | More error catching in list.php | Robin Appelman | 2014-07-01 | 1 | -7/+22 | |
| | ||||||
* | Handle StorageNotAvailableException in ajax/list.php | Robin Appelman | 2014-06-30 | 1 | -27/+37 | |
| | ||||||
* | Merge if statements | Joas Schilling | 2014-06-23 | 1 | -6/+2 | |
| | ||||||
* | Remove warning when deleting all entries | Vincent Petry | 2014-06-23 | 1 | -1/+2 | |
| | | | | | When deleting all entries, only "allfiles" is defined but not "file" or "files", which caused a PHP warning to be logged. | |||||
* | Fixed uploading by drag and drop into folder | Vincent Petry | 2014-06-19 | 1 | -19/+21 | |
| |