| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | feat: Support deleting metadata from WebDAVartonge/feat/allow_deleting_metadata | Louis Chemineau | 2025-03-04 | 3 | -0/+145 |
| | | | | | | | The `$value` will be `null` if the update is wrapped inside a `<d:remove>...</d:remove>` block. Signed-off-by: Louis Chemineau <louis@chmn.me> | ||||
| * | Merge pull request #51000 from nextcloud/fix/federatedfilesharing/group-cleanup | Stephan Orbaugh | 2025-03-03 | 1 | -0/+23 |
| |\ | | | | | fix(FederatedShareProvider): Delete external shares when groups are deleted or users removed from a group | ||||
| | * | fix(Share20): Convert broken hooks to IEventListener | provokateurin | 2025-03-03 | 1 | -0/+23 |
| | | | | | | | | | Signed-off-by: provokateurin <kate@provokateurin.de> | ||||
| * | | Merge pull request #51194 from nextcloud/refactor/tempmanager | Kate | 2025-03-03 | 1 | -6/+0 |
| |\ \ | | | | | | | refactor(TempManager): Simplify and unify implementations and remove legacy behavior | ||||
| | * | | refactor(TempManager): Simplify and unify implementations and remove legacy ↵refactor/tempmanager | provokateurin | 2025-03-03 | 1 | -6/+0 |
| | | | | | | | | | | | | | | | | | | | behavior Signed-off-by: provokateurin <kate@provokateurin.de> | ||||
| * | | | build(integration): Disable password_policy appbuild/integration/disable-password_policy-app | provokateurin | 2025-03-03 | 1 | -0/+2 |
| |/ / | | | | | | | Signed-off-by: provokateurin <kate@provokateurin.de> | ||||
| * | | fix: incorrect types detected by updated stubschore/update-stub | Ferdinand Thiessen | 2025-02-27 | 1 | -8/+0 |
| | | | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> | ||||
| * | | chore: Update php intl stub for PHP 8.0+ | Ferdinand Thiessen | 2025-02-27 | 1 | -1886/+2266 |
| | | | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> | ||||
| * | | fix: Fix test by scanning group before using itbug/noid/weird-ldap-caching | Côme Chilliet | 2025-02-27 | 1 | -1/+1 |
| | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> | ||||
| * | | fix(security): Update CA certificate bundleautomated/noid/master-update-ca-cert-bundle | nextcloud-command | 2025-02-26 | 1 | -1/+1 |
| |/ | | | | Signed-off-by: GitHub <noreply@github.com> | ||||
| * | ci(autochecks): Run some autochecks also on non-PHP filesci/noid/run-some-autochecks-also-on-non-php-files | Joas Schilling | 2025-02-21 | 4 | -0/+8 |
| | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com> | ||||
| * | bump behat/behat from 3.18.1 to 3.19.0 in /build/integrationdependabot/composer/build/integration/behat/behat-3.19.0 | dependabot[bot] | 2025-02-18 | 1 | -15/+15 |
| | | | | | | | | | | | --- updated-dependencies: - dependency-name: behat/behat dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> | ||||
| * | fix: Fix psalm taint false-positives by small refactoringsfix/fix-psalm-taint-errors-2 | Côme Chilliet | 2025-02-17 | 1 | -36/+0 |
| | | | | | | | | Mostly make it clear that we trust admin input or that we correctly escape strings. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> | ||||
| * | fix: Fix false-positive psalm taint errors when outputting plain text | Côme Chilliet | 2025-02-17 | 1 | -8/+0 |
| | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> | ||||
| * | fix: Fix psalm taint false-positive by escaping trusted input | Côme Chilliet | 2025-02-17 | 1 | -8/+0 |
| | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> | ||||
| * | fix: Correctly tag json encoding in BaseResponse to fix false-positive | Côme Chilliet | 2025-02-17 | 1 | -8/+0 |
| | | | | | | | …in psalm taint analysis Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> | ||||
| * | fix: Move config.php taint trust upstream directly in OC\Config class | Côme Chilliet | 2025-02-17 | 1 | -34/+0 |
| | | | | | | | This solves some false-positive psalm taint errors Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> | ||||
| * | fix: Work around false-positive psalm taint error calling print_r in admin_audit | Côme Chilliet | 2025-02-17 | 1 | -5/+0 |
| | | | | | | | | Same issue as var_export, print_r is listed as sink but it’s not when using return:true. Anyway, using the logger context feature is better. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> | ||||
| * | chore: Correctly flag json encoding methods as escaping html and quotes | Côme Chilliet | 2025-02-17 | 1 | -8/+0 |
| | | | | | | | | Especially with JSON_HEX_TAG it’s perfectly fine to echo JSON, and we only use it in JSON output anyway. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> | ||||
| * | chore: Update psalm-baseline-security.xmlenh/apply-rector-set-to-apps | Côme Chilliet | 2025-02-13 | 1 | -18/+0 |
| | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> | ||||
| * | chore(rector): Enable Nextcloud 25 set for the apps folder | Côme Chilliet | 2025-02-13 | 1 | -0/+4 |
| | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> | ||||
| * | Merge pull request #50689 from nextcloud/fix/migrate-dav-to-eventschore/mail-bisect-ee48cafd200233203a1444dba797ef3eb89a35ca | Côme Chilliet | 2025-02-13 | 1 | -6/+0 |
| |\ | | | | | fix(dav): Migrate from hooks to user events | ||||
| | * | chore: Update psalm baseline | Côme Chilliet | 2025-02-10 | 1 | -6/+0 |
| | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> | ||||
| * | | fix(transifex): Adjust check for translation of appsbugfix/noid/ensure-translation-of-shipped-apps | Joas Schilling | 2025-02-11 | 1 | -4/+9 |
| |/ | | | | Signed-off-by: Joas Schilling <coding@schilljs.com> | ||||
| * | Merge pull request #50660 from nextcloud/fix/mime-int | John Molakvoæ | 2025-02-06 | 1 | -6/+0 |
| |\ | | | | | fix: make sure we process mime extensions as string | ||||
| | * | fix: make sure we process mime extensions as string | skjnldsv | 2025-02-05 | 1 | -6/+0 |
| | | | | | | | | | Signed-off-by: skjnldsv <skjnldsv@protonmail.com> | ||||
| * | | fix(provisioning_api): Correct limit for `editUser` | Ferdinand Thiessen | 2025-02-06 | 3 | -1/+19 |
| | | | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> | ||||
| * | | fix(FediverseAction): Ensure valid fediverse links are generated | Ferdinand Thiessen | 2025-02-06 | 1 | -0/+8 |
| | | | | | | | | | | | | | Harden also for existing values of the profile. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> | ||||
| * | | fix(sharing): Ensure download restrictions are not droppedfix/proper-download-check | Ferdinand Thiessen | 2025-02-04 | 1 | -0/+73 |
| |/ | | | | | | | | When a user receives a share with share-permissions but also with download restrictions (hide download or the modern download permission attribute), then re-shares of that share must always also include those restrictions. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> | ||||
| * | Merge pull request #50137 from ↵ | dependabot[bot] | 2025-01-30 | 1 | -84/+233 |
| |\ | | | | | | | nextcloud/dependabot/composer/build/integration/behat/behat-3.18.1 | ||||
| | * | build(deps-dev): bump behat/behat in /build/integrationdependabot/composer/build/integration/behat/behat-3.18.1 | dependabot[bot] | 2025-01-11 | 1 | -84/+233 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [behat/behat](https://github.com/Behat/Behat) from 3.16.0 to 3.18.1. - [Release notes](https://github.com/Behat/Behat/releases) - [Changelog](https://github.com/Behat/Behat/blob/master/CHANGELOG.md) - [Commits](https://github.com/Behat/Behat/compare/v3.16.0...v3.18.1) --- updated-dependencies: - dependency-name: behat/behat dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> | ||||
| * | | fix: Harden files scanner for invalid null access | Ferdinand Thiessen | 2025-01-28 | 1 | -15/+0 |
| | | | | | | | | | | | | | Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Kate <26026535+provokateurin@users.noreply.github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> | ||||
| * | | test: Reset sharing app config after testfix/share-api-create--permissions | Ferdinand Thiessen | 2025-01-28 | 1 | -0/+1 |
| | | | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> | ||||
| * | | fix(files_sharing): Respect permissions passed when creating link shares | Ferdinand Thiessen | 2025-01-28 | 1 | -0/+58 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Given: User creates a link or email share with permissions=4 (create only = file drop). Problem: Currently the permissions are automatically extended to permissions = 5 (READ + CREATE). Work around was to create the share and directly update it. Solution: Respect what the user is requesting, create a file drop share. Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> | ||||
| * | | Merge pull request #50221 from ↵ | Kate | 2025-01-27 | 1 | -0/+27 |
| |\ \ | | | | | | | | | | nextcloud/add-integration-tests-for-moving-a-file-from-and-to-a-shared-folder | ||||
| | * | | test: Add integration tests for moving a file from and to a shared folderadd-integration-tests-for-moving-a-file-from-and-to-a-shared-folder | Daniel Calviño Sánchez | 2025-01-27 | 1 | -0/+27 |
| | | | | | | | | | | | | | Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com> | ||||
| * | | | fix(ratelimit): Allow to bypass rate-limit from bruteforce allowlistbugfix/noid/allow-ratelimit-bypass | Joas Schilling | 2025-01-27 | 1 | -5/+0 |
| |/ / | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com> | ||||
| * | | fix(TemplateLayout): `core` is not an app but the server itselffix/get-version-of-core | Ferdinand Thiessen | 2025-01-24 | 1 | -9/+0 |
| | | | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> | ||||
| * | | fix(dav): default calendar and address book not created on first login | Richard Steinmetz | 2025-01-23 | 2 | -0/+9 |
| | | | | | | | | | Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud> | ||||
| * | | fix(files): more conversion tests and translate error messages | skjnldsv | 2025-01-17 | 1 | -0/+21 |
| | | | | | | | | | Signed-off-by: skjnldsv <skjnldsv@protonmail.com> | ||||
| * | | Merge pull request #50162 from nextcloud/fix/improve-ldap-avatar-handling | Arthur Schiwon | 2025-01-16 | 1 | -14/+0 |
| |\ \ | | | | | | | Improve ldap avatar handling | ||||
| | * | | chore(psalm): Update baseline to remove fixed errorsfix/improve-ldap-avatar-handling | Côme Chilliet | 2025-01-13 | 1 | -14/+0 |
| | |/ | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> | ||||
| * / | chore: add file conversion integration testsfeat/conversion-adjusting | skjnldsv | 2025-01-16 | 6 | -13/+188 |
| |/ | | | | Signed-off-by: skjnldsv <skjnldsv@protonmail.com> | ||||
| * | chore(federation): cleanup SettingsController and legacy AddServerMiddlewarefeat/auto-accept-trusted-server | skjnldsv | 2025-01-09 | 1 | -2/+2 |
| | | | | | Signed-off-by: skjnldsv <skjnldsv@protonmail.com> | ||||
| * | chore(federation): add trusted server auto accept integration tests | skjnldsv | 2025-01-09 | 3 | -52/+215 |
| | | | | | Signed-off-by: skjnldsv <skjnldsv@protonmail.com> | ||||
| * | Merge pull request #49966 from nextcloud/block-dav-move-parent | Stephan Orbaugh | 2025-01-07 | 2 | -0/+20 |
| |\ | | | | | fix: block moving files to it's own parent with dav | ||||
| | * | fix: block moving files to it's own parent with davblock-dav-move-parent | Robin Appelman | 2025-01-03 | 2 | -0/+20 |
| | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl> | ||||
| * | | Merge pull request #50035 from nextcloud/fix/http/jsonresponse-data-type | Joas Schilling | 2025-01-07 | 1 | -5/+0 |
| |\ \ | | | | | | | fix(HTTP): Adjust JSONResponse data type | ||||
| | * | | fix(HTTP): Adjust JSONResponse data typefix/http/jsonresponse-data-type | provokateurin | 2025-01-04 | 1 | -5/+0 |
| | |/ | | | | | | | Signed-off-by: provokateurin <kate@provokateurin.de> | ||||
| * / | fix: explicitly ignore nested mounts when transfering ownershipmount-move-checks | Robin Appelman | 2025-01-06 | 1 | -1/+1 |
| |/ | | | | Signed-off-by: Robin Appelman <robin@icewind.nl> | ||||
 |
index : nextcloud-server.git | |
| Nextcloud server, a safe home for all your data: https://github.com/nextcloud/server | www-data |
| aboutsummaryrefslogtreecommitdiffstats |