| Commit message (Collapse) | Author | Age | Files | Lines |
|\
| |
| | |
Files grid view
|
| |
| |
| |
| | |
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
|
| |\
| | |
| | |
| | | |
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
|
| | |
| | |
| | |
| | | |
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
|
|\ \ \
| | | |
| | | | |
adding .well-known/webfinger
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
The check is based on the HTTP status returned by the URL, and different
URLs may return different status (for example, DAV returns 207, while
a service like WebFinger would return 200), so the expected status needs
to be set depending on the URL.
Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
|
| | | | |
|
|\ \ \ \
| | | | |
| | | | | |
make scroll navigation items full width
|
| | |/ /
| |/| | |
|
|\ \ \ \
| | | | |
| | | | | |
Remove cookies from Clear-Site-Data Header
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
In https://github.com/nextcloud/server/commit/2f87fb6b456fd109c90a5093c31b7a3f62a32040 this header was introduced. The referenced documentation says:
> When delivered with a response from https://example.com/clear, the following header will cause cookies associated with the origin https://example.com to be cleared, as well as cookies on any origin in the same registered domain (e.g. https://www.example.com/ and https://more.subdomains.example.com/).
This also applies if `https://nextcloud.example.com/` sends the `Clear-Site-Data: "cookies"` header.
This is not the behavior we want at this point!
So I removed the deletion of cookies from the header. This has no effect on the logout process as this header is supported only recently and the logout works in old browsers as well.
Signed-off-by: Patrick Conrad <conrad@iza.org>
|
| |_|_|/
|/| | | |
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
|
|\ \ \ \
| | | | |
| | | | | |
Change typeface to Nunito
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
This fixes errors from LGTM like the following one:
Variable i is used like a local variable,
but is missing a declaration.
Signed-off-by: Stefan Weil <sw@weilnetz.de>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Add icon to file sidebar tabs
|
| | |_|/ /
| |/| | |
| | | | |
| | | | | |
Signed-off-by: Julius Härtl <jus@bitgrid.net>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Check if the X-XSS-Protection header contains the required fields
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Daniel Peukert <dan.peukert@gmail.com>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Daniel Peukert <dan.peukert@gmail.com>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Daniel Peukert <dan.peukert@gmail.com>
|
|\ \ \ \ \ \
| |_|_|/ / /
|/| | | | | |
Add missing semicolons
|
| | |/ / /
| |/| | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
This fixes some recommendations from LGTM:
Avoid automated semicolon insertion (90% of all statements
in the enclosing function have an explicit semicolon).
Signed-off-by: Stefan Weil <sw@weilnetz.de>
|
|/ / / /
| | | |
| | | |
| | | | |
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
|
|/ / /
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Which can be used for public iframe embeeding
See https://github.com/nextcloud/calendar/issues/169
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Julius Härtl <jus@bitgrid.net>
|
|/ /
| |
| |
| | |
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
|\ \
| | |
| | | |
Mandatory 2FA for groups
|
| | |
| | |
| | |
| | | |
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
|
|\ \ \
| |/ /
|/| |
| | |
| | | |
eugulixes/improve-encrypt-all-and-decrypt-all-commands
Check if TTY is invalid in encryption:encrypt-all and encryption:decrypt-all
|
| | |
| | |
| | |
| | | |
Signed-off-by: Evgeny Golyshev <eugulixes@gmail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
No more weird eval to construct a plural function.
We just use the plural function from symfony.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
|/ /
| |
| |
| | |
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Fixes #11531
Although "same-origin" is more strict than e.g. strict-origin it showed up a warning in setupcheck
Based on https://scotthelme.co.uk/a-new-security-header-referrer-policy/
Signed-off-by: Moritz Beck <git@birkenstab.de>
|
|\ \
| | |
| | | |
Remove duplicate call to decodeURIComponent
|
| |/
| |
| |
| | |
Signed-off-by: Bernd Stellwag <burned@zerties.org>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
When "session_lifetime" can not be converted to a number the interval
becomes a NaN due to dividing it by 2. This NaN was "dragged" over all
the other mathematical operations and caused the csrftoken to be got
again and again due to an infinite loop with no pauses in "setInterval".
Now, the interval is set to the default value instead if the
"session_lifetime" can not be converted to a number.
Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
|
|/
|
|
| |
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
|
|
|
|
|
|
| |
The problem is that the version without the slash is the correct one.
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
|