Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | [tx-robot] updated from transifex | Jenkins for ownCloud | 2016-02-11 | 72 | -50/+66 |
| | |||||
* | Revert back to non-webdav download link for public URLs | Vincent Petry | 2016-02-10 | 2 | -7/+4 |
| | | | | | Fixes issues with browsers not happy with the token. Fixes activities which were not sent. | ||||
* | Merge pull request #22276 from owncloud/harden-updater-auth | Thomas Müller | 2016-02-10 | 3 | -5/+6 |
|\ | | | | | Harden updater authentication | ||||
| * | Harden updater authentication | Lukas Reschke | 2016-02-10 | 3 | -5/+6 |
| | | | | | | | | | | - Reset tokens after 2 hours as discussed at https://github.com/owncloud/updater/issues/220#issuecomment-182033453 - Used BCrypt for storing the password in the config.php. This makes it substantially harder in case of a leakage of the token to bruteforce it. In the future we can evaluate also an HMAC including the IP. That's a bit tricker though at the moment considering that we support reverse proxies. Didn't feel brave enough to touch that dragon now as well ;) | ||||
* | | Merge pull request #22269 from ↵ | Thomas Müller | 2016-02-10 | 2 | -16/+55 |
|\ \ | | | | | | | | | | | | | owncloud/issue-22243-avoid-deadlock-with-lots-of-entries-to-cleanup Chunk the cleanup queries to make sure they don't time out | ||||
| * | | Chunk the queries to make sure they don't time out | Joas Schilling | 2016-02-10 | 2 | -16/+55 |
| | | | |||||
* | | | Merge pull request #22273 from owncloud/versions-fixpathasrecipient | Thomas Müller | 2016-02-10 | 2 | -1/+7 |
|\ \ \ | |_|/ |/| | | Fix versions path as share recipient when different than owner path | ||||
| * | | Use full path of known file when handling versions | Vincent Petry | 2016-02-10 | 1 | -1/+2 |
| | | | | | | | | | | | | | | | Instead of relying on the versions API response, use the known file path when populating version models. | ||||
| * | | Remove path from versions response | Vincent Petry | 2016-02-10 | 1 | -0/+5 |
| |/ | | | | | | | | | | | | | | | | | The path attribute contains the path relative to the owner's home folder, not the one from the recipient, which is useless for the client and needlessly discloses the owner's original path. The requested already has access to the full path of the file, so no need to add it to the response. | ||||
* | | Merge pull request #22267 from owncloud/fix_encryption2 | Thomas Müller | 2016-02-10 | 2 | -25/+68 |
|\ \ | | | | | | | calculate and update the version of the encryption signature correctly | ||||
| * | | remember signature version and only set it on update to make sure that other | Bjoern Schiessle | 2016-02-10 | 2 | -12/+40 |
| | | | | | | | | | | | | apps like files_versions still get the old signature version | ||||
| * | | use the version of the original file if we write the part file to have a ↵ | Bjoern Schiessle | 2016-02-10 | 1 | -15/+30 |
| | | | | | | | | | | | | proper version if we move the file over to the original location | ||||
* | | | Merge pull request #20073 from owncloud/files-should-add-download-disposition | Thomas Müller | 2016-02-10 | 1 | -0/+17 |
|\ \ \ | | | | | | | | | Serve files with an attachment disposition for new DAV endpoint | ||||
| * | | | Only set the header if the node exists and in case the request is a GET | Thomas Müller | 2016-02-08 | 1 | -3/+8 |
| | | | | |||||
| * | | | Serve files with an attachment disposition for new DAV endpoint | Lukas Reschke | 2016-02-08 | 1 | -0/+12 |
| | | | | | | | | | | | | | | | | This adds a `Content-Disposition: attachment` header to all files served via the DAV endpoint. | ||||
* | | | | Merge pull request #22270 from owncloud/use-cache-directly | Thomas Müller | 2016-02-10 | 1 | -5/+2 |
|\ \ \ \ | | | | | | | | | | | Use cache directly instead of QueryBuilder | ||||
| * | | | | Use cache directly instead of QB | Lukas Reschke | 2016-02-10 | 1 | -5/+2 |
| | |_|/ | |/| | | | | | | | | | | In case somebody does not use oc_filecache | ||||
* | | | | Merge pull request #22263 from owncloud/fix-group-principals | Thomas Müller | 2016-02-10 | 2 | -8/+24 |
|\ \ \ \ | |/ / / |/| | | | Fix group principal | ||||
| * | | | Fix group principal | Thomas Müller | 2016-02-10 | 2 | -8/+24 |
| | | | | |||||
* | | | | Fix oracle by using less quotes | Joas Schilling | 2016-02-10 | 1 | -1/+1 |
| | | | | |||||
* | | | | Listen to the notification event to reload the file list | Joas Schilling | 2016-02-10 | 1 | -1/+13 |
| | | | | |||||
* | | | | Mark the accept button as primary | Joas Schilling | 2016-02-10 | 1 | -1/+2 |
| | | | | |||||
* | | | | Create the actions with the correct ID | Joas Schilling | 2016-02-10 | 2 | -5/+6 |
| | | | | |||||
* | | | | Make sure the share ID is an integer | Joas Schilling | 2016-02-10 | 1 | -2/+2 |
| | | | | |||||
* | | | | Fix action paths | Joas Schilling | 2016-02-10 | 1 | -2/+2 |
| | | | | |||||
* | | | | Bring the messages inline | Joas Schilling | 2016-02-10 | 1 | -1/+1 |
| | | | | |||||
* | | | | Fix the notification API usage | Joas Schilling | 2016-02-10 | 2 | -1/+6 |
| | | | | |||||
* | | | | Revert "Disable the remote sharing notifications until they work properly" | Joas Schilling | 2016-02-10 | 3 | -8/+2 |
| |_|/ |/| | | | | | | | | | | | | | | | | | This reverts commit 6bc93c740194d245bb9a7d1f230ed33461f842a7. Conflicts: apps/files_sharing/lib/external/manager.php | ||||
* | | | [tx-robot] updated from transifex | Jenkins for ownCloud | 2016-02-10 | 10 | -2/+46 |
| | | | |||||
* | | | Add tests for setVersion | Lukas Reschke | 2016-02-09 | 1 | -0/+40 |
| | | | |||||
* | | | Use cache update instead of put for encryption version | Vincent Petry | 2016-02-09 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | Saves a call to fetch the file id which didn't even work for a reason. This fix properly sets the version in the database. | ||||
* | | | Use cache and add tests | Lukas Reschke | 2016-02-09 | 3 | -15/+39 |
| | | | |||||
* | | | don't decrease ->version for part files but only a local variable, otherwise ↵ | Bjoern Schiessle | 2016-02-09 | 1 | -4/+8 |
| | | | | | | | | | | | | it can happen that we decrease it twice and end up with the wrong value | ||||
* | | | realPath should contain the path to the file we want to read, e.g. the ↵ | Bjoern Schiessle | 2016-02-09 | 1 | -1/+1 |
| | | | | | | | | | | | | version and not the original file | ||||
* | | | Use database for keeping track of the version | Lukas Reschke | 2016-02-09 | 3 | -6/+40 |
| | | | |||||
* | | | Use number of chunk for HMAC as well | Lukas Reschke | 2016-02-09 | 2 | -14/+16 |
| | | | | | | | | | | | | Prevents switching single blocks within the encrypted file. | ||||
* | | | Keep track of file version | Lukas Reschke | 2016-02-09 | 3 | -13/+53 |
| | | | | | | | | | | | | This way it is not possible anymore for an external storage admin to put up old versions of the file. | ||||
* | | | Clarify documentation | Lukas Reschke | 2016-02-09 | 1 | -0/+2 |
| | | | |||||
* | | | Use hash with appended "a" of the original password for the authentication | Lukas Reschke | 2016-02-09 | 1 | -3/+4 |
| | | | |||||
* | | | fixing unit tests | Björn Schießle | 2016-02-09 | 3 | -11/+56 |
| | | | |||||
* | | | Use random_bytes instead OpenSSL | Lukas Reschke | 2016-02-09 | 1 | -8/+1 |
| | | | |||||
* | | | meta data are at the end of the file | Björn Schießle | 2016-02-09 | 1 | -1/+1 |
| | | | |||||
* | | | always use default cipher for write operations, no matter how the file was ↵ | Björn Schießle | 2016-02-09 | 1 | -3/+3 |
| | | | | | | | | | | | | encrypted before | ||||
* | | | make it backward compatible to work with signed and un-signed files | Björn Schießle | 2016-02-09 | 2 | -10/+19 |
| | | | |||||
* | | | sign all encrypted blocks and check signature on decrypt | Björn Schießle | 2016-02-09 | 7 | -32/+131 |
| | | | |||||
* | | | Add note about the addPadding function | Lukas Reschke | 2016-02-09 | 1 | -0/+4 |
| | | | |||||
* | | | Use an actual 16 byte long IV | Lukas Reschke | 2016-02-09 | 1 | -17/+2 |
| | | | | | | | | | | | | The previous IV was actually 12 byte extended to 16 byte using base64. As the encrypted file should be fine with containing binary data as well we can simply remove the encoding like that here. | ||||
* | | | Use AES-256-CTR as default | Lukas Reschke | 2016-02-09 | 2 | -26/+68 |
| | | | | | | | | | | | | CTR is recommended over CFB mode. | ||||
* | | | Merge pull request #22255 from owncloud/add-sso-for-updatechecker | Thomas Müller | 2016-02-09 | 11 | -1/+490 |
|\ \ \ | | | | | | | | | Add SSO for updater application | ||||
| * | | | Add SSO for updater application | Lukas Reschke | 2016-02-09 | 11 | -1/+490 |
| | | | | | | | | | | | | | | | | Allows logging-in into the updater application by visiting the admin panel and pressing "Open updater". |