summaryrefslogtreecommitdiffstats
path: root/build
Commit message (Collapse)AuthorAgeFilesLines
* Fix expceted psalm-ocp.xml fileRoeland Jago Douma2020-12-301-0/+1
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Merge pull request #24903 from nextcloud/enh/psalm-ocpRoeland Jago Douma2020-12-301-0/+249
|\ | | | | Add dedicated baseline for OCP
| * Add dedicated baseline for OCPRoeland Jago Douma2020-12-301-0/+249
| | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Merge pull request #24895 from ↵Roeland Jago Douma2020-12-304-3/+5
|\ \ | | | | | | | | | | | | nextcloud/make-integration-tests-work-with-both-php-7.3-and-7.4 Make integration tests work with both PHP 7.3 and 7.4
| * | Make integration tests work with both PHP 7.3 and 7.4Daniel Calviño Sánchez2020-12-304-3/+5
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The "Trashbin" and "WebDav" traits were using each other in a circular dependency ("WebDav" -> "Sharing" -> "Provisioning" -> "BasicStructure" -> "Trashbin" -> "WebDav"). In PHP 7.3 this worked fine, but in PHP 7.4 the fatal error "Trait 'WebDav' not found in .../Trashbin.php" was thrown. To solve this now the "TrashBin" trait no longer explicitly uses "WebDav". However, due to this change, the class using "TrashBin" is now expected to also use "WebDav". As the "Trashbin" trait was not needed by most contexts using the "BasicStructure" trait "Trashbin" was removed from it and added only to those contexts that actually need it. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
* / Update psalm baselineNextcloud-PR-Bot2020-12-301-7/+2
|/ | | | Signed-off-by: GitHub <noreply@github.com>
* Merge pull request #23958 from ↵dependabot-preview[bot]2020-12-292-207/+263
|\ | | | | | | nextcloud/dependabot/npm_and_yarn/build/node-sass-5.0.0
| * Bump node-sass from 4.14.1 to 5.0.0 in /builddependabot-preview[bot]2020-12-292-207/+263
| | | | | | | | | | | | | | | | Bumps [node-sass](https://github.com/sass/node-sass) from 4.14.1 to 5.0.0. - [Release notes](https://github.com/sass/node-sass/releases) - [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md) - [Commits](https://github.com/sass/node-sass/compare/v4.14.1...v5.0.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
* | Merge pull request #24533 from ↵Christoph Wurst2020-12-291-92/+35
|\ \ | |/ |/| | | | | nextcloud/dependabot/composer/icewind/streams-0.7.2 Bump icewind/streams from 0.7.1 to 0.7.2
| * Bump icewind/streams from 0.7.1 to 0.7.2Christoph Wurst2020-12-291-92/+35
| | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | jsunit: Run jsunit with chromium/puppeteer on github actionsJulius Härtl2020-12-292-2183/+1006
|/ | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Update the Psalm baselineChristoph Wurst2020-12-221-22/+7
| | | | | | Some issues were resolved, hence every CI run shows this diff. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Merge pull request #22916 from J0WI/unifiy-links-to-php.netRoeland Jago Douma2020-12-224-331/+331
|\ | | | | Unify links to php.net
| * Unify links to php.netJ0WI2020-09-174-331/+331
| | | | | | | | | | | | Update all links to https://www.php.net/ Signed-off-by: J0WI <J0WI@users.noreply.github.com>
* | Update all license headers for Nextcloud 21Christoph Wurst2020-12-1612-9/+14
| | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | Update psalm baselineNextcloud-PR-Bot2020-12-161-10/+2
| | | | | | | | Signed-off-by: GitHub <noreply@github.com>
* | [Security] Bump ini from 1.3.5 to 1.3.7 in /builddependabot-preview[bot]2020-12-101-6/+7
| | | | | | | | | | | | | | Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.7. **This update includes a security fix.** - [Release notes](https://github.com/isaacs/ini/releases) - [Commits](https://github.com/isaacs/ini/compare/v1.3.5...v1.3.7) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
* | Merge pull request #24605 from nextcloud/enh/share-deckRoeland Jago Douma2020-12-101-11/+2
|\ \ | | | | | | Add deck share provider support
| * | Update psalm baselineJulius Härtl2020-12-091-11/+2
| | | | | | | | | | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* | | Merge pull request #24247 from nextcloud/bugfix/noid/ocm-providerId-stringJulius Härtl2020-12-091-15/+3
|\ \ \ | |/ / |/| |
| * | Update psalm baselineJulius Härtl2020-12-081-15/+3
| | | | | | | | | | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* | | Update psalm baselineNextcloud-PR-Bot2020-12-091-1/+0
| | | | | | | | | | | | Signed-off-by: GitHub <noreply@github.com>
* | | Merge pull request #24486 from nextcloud/feature/noid/phone-number-validationJoas Schilling2020-12-082-4/+65
|\ \ \ | |/ / |/| | Phone number validation and search
| * | Unit tests for searching by phone numberJoas Schilling2020-12-071-1/+1
| | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
| * | Add a config for default region of phone numbersJoas Schilling2020-12-071-2/+2
| | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
| * | Add an integration test for the phone search APIJoas Schilling2020-12-072-4/+65
| | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | Update psalm baselineRoeland Jago Douma2020-12-071-2/+12
| | | | | | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | | Add integration tests for getting guest avatarsDaniel Calviño Sánchez2020-12-072-0/+30
| | | | | | | | | | | | Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
* | | Add integration tests for resized user avatarsDaniel Calviño Sánchez2020-12-072-7/+88
| | | | | | | | | | | | | | | | | | | | | | | | Even on solid color images the resizing can cause some small artifacts that slightly modify the color of certain pixels. Due to this now the color comparison is no longer strict but fuzzy. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
* | | Add integration tests for user avatarsDaniel Calviño Sánchez2020-12-075-0/+344
| | | | | | | | | | | | Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
* | | Make possible to set body in requesttoken requests in integration testsDaniel Calviño Sánchez2020-12-071-7/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | "sendingAToWithRequesttoken" needs to be used to test some non OCS endpoints which require the request token to be sent in the request. Now it is possible to specify the body (or, rather, additional contents beside the cookies and the request token) for those requests, as it will be needed for example to upload an avatar. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
* | | Make possible to send requests as anonymous users in integration testsDaniel Calviño Sánchez2020-12-071-2/+2
|/ / | | | | | | | | | | | | | | | | Until now requests always had "auth" headers either for an admin or a regular user, depending on the value of "currentUser". Now, if "currentUser" starts by "anonymous" no "auth" header is sent, which makes possible to also test requests with users not logged in. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
* | Always install composer v2Julius Härtl2020-12-041-1/+1
| | | | | | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* | Merge pull request #24429 from nextcloud/3rdparty/closureChristoph Wurst2020-12-031-0/+15
|\ \ | | | | | | [3rdparty] Migrate to Opis/Closure
| * | Update psalm-baseline.xmlMorris Jobke2020-12-021-0/+15
| | | | | | | | | | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | | Update psalm baselineNextcloud-PR-Bot2020-12-031-1/+1
|/ / | | | | | | Signed-off-by: GitHub <noreply@github.com>
* | Merge pull request #23278 from nextcloud/enh/noid/user-limitsChristoph Wurst2020-12-021-1/+2
|\ \ | | | | | | Allow subscription to indicate that a userlimit is reached
| * | Allow subscription to indicate that a userlimit is reachedMorris Jobke2020-12-021-1/+2
| | | | | | | | | | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | | Merge pull request #24396 from nextcloud/dont-use-system-composerMorris Jobke2020-12-021-17/+11
|\ \ \ | |/ / |/| | dont use system composer for autoload checker
| * | cleanup after autoloader generationRobin Appelman2020-12-021-0/+2
| | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
| * | dont use system composer for autoload checkerRobin Appelman2020-11-261-17/+9
| | | | | | | | | | | | | | | | | | this ensures that the same composer version is used by everyone (and ci) Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | Update psalm baselineNextcloud-PR-Bot2020-12-011-21/+2
| | | | | | | | | | | | Signed-off-by: GitHub <noreply@github.com>
* | | Update psalm baselineNextcloud-PR-Bot2020-11-291-3/+0
|/ / | | | | | | Signed-off-by: GitHub <noreply@github.com>
* | Update psalm baselineNextcloud-PR-Bot2020-11-241-6/+1
| | | | | | | | Signed-off-by: GitHub <noreply@github.com>
* | Add Psalm Taint Flow AnalysisLukas Reschke2020-11-201-0/+60
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds the Psalm Security Analysis, as described at https://psalm.dev/docs/security_analysis/ It also adds a plugin for adding input into AppFramework. The results can be viewed in the GitHub Security tab at https://github.com/nextcloud/server/security/code-scanning **Q&A:** Q: Why do you not use the shipped Psalm version? A: I do a lot of changes to the Psalm Taint behaviour. Using released versions is not gonna get us the results we want. Q: How do I improve false positives? A: https://psalm.dev/docs/security_analysis/avoiding_false_positives/ Q: How do I add custom sources? A: https://psalm.dev/docs/security_analysis/custom_taint_sources/ Q: We should run this on apps! A: Yes. Q: What will change in Psalm? A: Quite some of the PHP core functions are not yet marked to propagate the taint. This leads to results where the taint flow is lost. That's something that I am currently working on. Q: Why is the plugin MIT licensed? A: Because its the first of its kind (based on GitHub Code Search) and I want other people to copy it if they want to. Security is for all :) Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* | Bump vimeo/psalm from 4.1.1 to 4.2.0dependabot-preview[bot]2020-11-201-117/+28
| | | | | | | | | | | | | | | | | | Bumps [vimeo/psalm](https://github.com/vimeo/psalm) from 4.1.1 to 4.2.0. - [Release notes](https://github.com/vimeo/psalm/releases) - [Commits](https://github.com/vimeo/psalm/compare/4.1.1...4.2.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | Set frame-ancestors to none if none are filledRoeland Jago Douma2020-11-181-1/+1
| | | | | | | | | | | | | | | | frame-ancestors doesn't fall back to default-src. So when we apply a very restricted CSP we should make sure to set it to 'none' and not leave it empty. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Update psalm baselineNextcloud-PR-Bot2020-11-171-1/+1
| | | | | | | | Signed-off-by: GitHub <noreply@github.com>
* | Merge pull request #24069 from nextcloud/fix-default-internal-expiration-dateRoeland Jago Douma2020-11-166-18/+143
|\ \ | | | | | | Fix default internal expiration date
| * | Add integration tests for creating shares with default expiration datesDaniel Calviño Sánchez2020-11-162-0/+112
| | | | | | | | | | | | Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-25 14:41:40 +0000