summaryrefslogtreecommitdiffstats
path: root/build
Commit message (Collapse)AuthorAgeFilesLines
* No more root fileJoas Schilling2017-07-251-1/+0
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Move image-optimization.sh to build dirRoeland Jago Douma2017-07-241-0/+20
| | | | | | * We should not ship this! Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Add Phan plugin to check for SQL injectionsLukas Reschke2017-07-204-0/+255
| | | | | | | | | | This adds a phan plugin which checks for SQL injections on code using our QueryBuilder, while it isn't perfect it should already catch most potential issues. As always, static analysis will sometimes have false positives and this is also here the case. So in some cases the analyzer just doesn't know if something is potential user input or not, thus I had to add some `@suppress SqlInjectionChecker` in front of those potential injections. The Phan plugin hasn't the most awesome code but it works and I also added a file with test cases. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Add workaround for https://github.com/etsy/phan/issues/1033Lukas Reschke2017-07-191-1/+0
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Run phan over code baseLukas Reschke2017-07-197-0/+2346
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Add test to check if new files are added to the root of the repositoryMorris Jobke2017-07-121-0/+109
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Prevent sending second WWW-Authenticate headerLukas Reschke2017-06-131-2/+2
| | | | | | | | Overrides \Sabre\DAV\Auth\Backend\AbstractBearer::challenge to prevent sending a second WWW-Authenticate header which is standard-compliant but most DAV clients simply fail hard. Fixes https://github.com/nextcloud/server/issues/5088 Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Bearer comes first on the new endpointLukas Reschke2017-05-181-1/+1
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Adjust realm from SabreDAV to NextcloudLukas Reschke2017-05-181-2/+2
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Make legacy DAV backend use the BearerAuth backend as wellLukas Reschke2017-05-181-1/+5
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Add additional test for accessing DAV using Bearer AuthLukas Reschke2017-05-181-0/+4
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Use a standardized Bearer nowLukas Reschke2017-05-181-2/+2
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Add app to autoenabled provisioning API scenarioLukas Reschke2017-05-181-0/+1
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Extract app name and navigation entries for l10nMorris Jobke2017-05-081-0/+60
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Split up sharing-v1-part2.feature to avoid timeoutsMorris Jobke2017-05-022-388/+396
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Fix forbidden backslash DAV integration testsVincent Petry2017-04-261-12/+12
|
* Added test cases from core 16825Sergio Bertolin2017-04-261-0/+41
|
* Simplified new endpoint move testVincent Petry2017-04-261-9/+4
|
* Added case when final chunk move must not change file idVincent Petry2017-04-261-0/+13
|
* Added test about checking file id after a moveSergio Bertolin2017-04-262-2/+45
|
* Merge pull request #4494 from nextcloud/fix-jsunitMorris Jobke2017-04-251-1/+1
|\ | | | | Fix JS unit failure because of Jasmine 2.6 and the phantomjs launcher
| * Fix JS unit failure because of Jasmine 2.6 and the phantomjs launcherMorris Jobke2017-04-251-1/+1
| | | | | | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | Loop over the apps directory and add the taskJoas Schilling2017-04-251-23/+11
| | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | Check whether we can json decode the translationsJoas Schilling2017-04-251-0/+81
|/ | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Add support for ratelimiting via annotationsLukas Reschke2017-04-131-0/+58
| | | | | | | | | | | | | This allows adding rate limiting via annotations to controllers, as one example: ``` @UserRateThrottle(limit=5, period=100) @AnonRateThrottle(limit=1, period=100) ``` Would mean that logged-in users can access the page 5 times within 100 seconds, and anonymous users 1 time within 100 seconds. If only an AnonRateThrottle is specified that one will also be applied to logged-in users. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Favorites integration tests for shared filesMorris Jobke2017-04-121-0/+13
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Fix casing of same origin frame optionJoas Schilling2017-04-123-4/+4
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Add integration test for trashbinVincent Petry2017-04-114-10/+164
| | | | | | | | | Add test for basic deletion. Add test when deleting from shared folder as recipient. Add test to check that metadata stays when moving out of shared folder as recipient. Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Clear opcode cache after config changeLukas Reschke2017-04-112-1/+14
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Add integration testsLukas Reschke2017-04-113-0/+51
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Merge pull request #4221 from nextcloud/provisioning-api-for-account-infoMorris Jobke2017-04-072-2/+71
|\ | | | | Allow to change account info via provisioning api
| * Allow to change account info via provisioning apiJoas Schilling2017-04-072-2/+71
| | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | Merge pull request #4224 from nextcloud/dont-list-on-public-calendar-endpointMorris Jobke2017-04-052-1/+57
|\ \ | | | | | | Don't list on public calendar endpoints
| * | Don't list on public calendar endpointsLukas Reschke2017-04-052-1/+57
| |/ | | | | | | | | | | There is no need to allow listing here. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* / Add integration tests for token authLukas Reschke2017-04-052-36/+158
|/ | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* mergejs should print a newline between importsRoeland Jago Douma2017-03-311-0/+1
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* fix setup of external storage integration testsRobin Appelman2017-03-301-1/+1
| | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* Fix unit testsMorris Jobke2017-03-281-1/+1
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Split long running features/sharing-v1.feature into two smaller partsMorris Jobke2017-03-282-710/+718
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Merge pull request #4004 from nextcloud/backport-27172Roeland Jago Douma2017-03-282-1/+30
|\ | | | | Remove SharedCache::getNumericStorageId to let CacheWrapper do it
| * Remove SharedCache::getNumericStorageId to let CacheWrapper do itVincent Petry2017-03-232-1/+30
| | | | | | | | | | | | The CacheWrapper will properly forward the call to the wrapped cache. Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | Use authType BASIC for Sabre client in integration testsVincent Petry2017-03-241-6/+7
| | | | | | | | | | | | | | | | | | | | | | This helps massively reduce the numerous useless 401 exceptions that appears in the test log. These appear only because Sabre first connects without any auth type to receive the challenge and then sends the authentication data. With this change it will directly use basic auth. Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | Merge pull request #4013 from nextcloud/bundle_vendor_jsLukas Reschke2017-03-242-0/+60
|\ \ | | | | | | Bundle vendor js
| * | Add CI step to verify merged vendor jsRoeland Jago Douma2017-03-231-0/+25
| | | | | | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
| * | Merge vendor jsRoeland Jago Douma2017-03-231-0/+35
| |/ | | | | | | | | | | | | | | There is a bunch of javascript we always load from vendors. This combines this into 1 javascript file. Which reduces the number of request by ~10. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | also install sinonMorris Jobke2017-03-231-1/+2
| | | | | | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | Update karma, use sinon from npmVincent Petry2017-03-231-5/+10
| | | | | | | | | | | | | | Update karma library and use sinon JS library provided by karma-jasmine-sinon instead of local file. Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | Merge pull request #3879 from nextcloud/downstream-26915Morris Jobke2017-03-236-7/+256
|\ \ | | | | | | Added integration tests for sharees using v2.php
| * | Use proper bash test syntaxMorris Jobke2017-03-201-1/+1
| | | | | | | | | | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
| * | Fix warningJoas Schilling2017-03-201-1/+0
| | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>