aboutsummaryrefslogtreecommitdiffstats
path: root/core
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #1929 from nextcloud/share_email_to_OCSLukas Reschke2016-10-273-63/+0
|\ | | | | Remove notify recipient function
| * Remove notify recipient optionRoeland Jago Douma2016-10-263-63/+0
| | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Merge pull request #1930 from nextcloud/fix_avatars_exifLukas Reschke2016-10-271-0/+1
|\ \ | | | | | | Fix avatar on exif rotated images
| * | Fix avatar on exif rotated imagesRoeland Jago Douma2016-10-261-0/+1
| |/ | | | | | | | | | | Fixes #1928 Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* / [tx-robot] updated from transifexNextcloud bot2016-10-274-0/+16
|/
* [tx-robot] updated from transifexNextcloud bot2016-10-266-0/+24
|
* Missing returns + autoloader fileLukas Reschke2016-10-251-0/+2
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Inlince oc.js if possible!Roeland Jago Douma2016-10-253-0/+15
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Move oc.js to a proper classRoeland Jago Douma2016-10-252-3/+91
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Merge pull request #1891 from nextcloud/downstream-26430Lukas Reschke2016-10-251-3/+3
|\ | | | | add upgrade command before repair, handle NeedsUpgradeException better
| * add upgrade command before repair, handle NeedsUpgradeExcaption betterJörn Friedrich Dreyer2016-10-241-3/+3
| |
* | Merge pull request #1871 from nextcloud/use-csp-noncesMorris Jobke2016-10-253-3/+3
|\ \ | | | | | | Use CSP nonces
| * | Add ContentSecurityPolicyNonceManagerLukas Reschke2016-10-243-3/+3
| | | | | | | | | | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
| * | Add support for CSP noncesLukas Reschke2016-10-243-3/+3
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | CSP nonces are a feature available with CSP v2. Basically instead of saying "JS resources from the same domain are ok to be served" we now say "Ressources from everywhere are allowed as long as they add a `nonce` attribute to the script tag with the right nonce. At the moment the nonce is basically just a `<?php p(base64_encode($_['requesttoken'])) ?>`, we have to decode the requesttoken since `:` is not an allowed value in the nonce. So if somebody does on their own include JS files (instead of using the `addScript` public API, they now must also include that attribute.) IE does currently not implement CSP v2, thus there is a whitelist included that delivers the new CSP v2 policy to newer browsers. Check http://caniuse.com/#feat=contentsecuritypolicy2 for the current browser support list. An alternative approach would be to just add `'unsafe-inline'` as well as `'unsafe-inline'` is ignored by CSPv2 when a nonce is set. But this would make this security feature unusable at all in IE. Not worth it at the moment IMO. Implementing this offers the following advantages: 1. **Security:** As we host resources from the same domain by design we don't have to worry about 'self' anymore being in the whitelist 2. **Performance:** We can move oc.js again to inline JS. This makes the loading way quicker as we don't have to load on every load of a new web page a blocking dynamically non-cached JavaScript file. If you want to toy with CSP see also https://csp-evaluator.withgoogle.com/ Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* | [tx-robot] updated from transifexNextcloud bot2016-10-2562-68/+86
| |
* | Merge pull request #1452 from nextcloud/appconfig-endpointJoas Schilling2016-10-257-110/+175
|\ \ | | | | | | Appconfig endpoint
| * | Fix missing semicolonJoas Schilling2016-10-241-1/+1
| | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
| * | Make AppConfig part of the public APIJoas Schilling2016-10-217-110/+175
| | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | Merge pull request #1283 from nextcloud/us_files-ui-webdav-uploadLukas Reschke2016-10-253-1/+127
|\ \ \ | | | | | | | | Use Webdav PUT for uploads
| * | | More fixes to file uploadVincent Petry2016-10-241-1/+40
| | | | | | | | | | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
| * | | JS utility function to compare pathsVincent Petry2016-10-242-0/+87
| | |/ | |/| | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | | Merge pull request #1823 from nextcloud/filepicker-folder-fixRoeland Jago Douma2016-10-251-1/+4
|\ \ \ | | | | | | | | Fix picking a folder with the filepicker
| * | | Fix picking a folder with the filepickerRobin Appelman2016-10-201-1/+4
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | | Merge pull request #1860 from ryanwr/feature-sort-favoriteRoeland Jago Douma2016-10-252-1/+13
|\ \ \ \ | | | | | | | | | | Sort favorite files first
| * | | | Sort favorite files first Issue #1802ryanwr2016-10-242-1/+13
| | |_|/ | |/| | | | | | | | | | Signed-off-by: Ryan Welch <ryantwr@gmail.com>
* | | | Merge pull request #1850 from nextcloud/filepicker-empty-folderRoeland Jago Douma2016-10-253-1/+20
|\ \ \ \ | |_|_|/ |/| | | show empty folder message in filepicker
| * | | show empty folder message in filepickerRobin Appelman2016-10-213-1/+20
| |/ / | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | Merge pull request #1852 from nextcloud/downstream-25579Lukas Reschke2016-10-221-0/+0
|\ \ \ | | | | | | | | Adding Open Graph Support for public shares
| * | | Use proper imageMorris Jobke2016-10-211-0/+0
| | | | | | | | | | | | | | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
| * | | Adding Open Graph Support for public shares http://ogp.me/Thomas Müller2016-10-211-0/+0
| | | | | | | | | | | | | | | | | | | | | | | | In case no preview is available we display the ownCloud logo Fix unit test
* | | | Merge pull request #1841 from nextcloud/oc_26359Lukas Reschke2016-10-226-55/+73
|\ \ \ \ | |/ / / |/| | | Bumo zxcvbn && Fix zxcvbn path in setup page (26359)
| * | | fix .gitignore and include zxcvbn.jsMorris Jobke2016-10-213-3/+34
| | | | | | | | | | | | | | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
| * | | Fix zxcvbn path in setup page (#26359)Philipp Eichhorn2016-10-211-1/+1
| | | | | | | | | | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
| * | | Bump bower dep to proper v4.4.0Roeland Jago Douma2016-10-213-51/+38
| |/ / | | | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* / / Remove removed --dry-run command from occ help (#26352)Vincent Petry2016-10-211-6/+0
|/ / | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Merge pull request #1812 from ↵Jakob Sack2016-10-201-0/+1
|\ \ | | | | | | | | | | | | nextcloud/allow-to-dismiss-the-code-integrity-warning Allow to dismiss the code integrity warning
| * | Allow to dismiss the code integrity warningJoas Schilling2016-10-201-0/+1
| | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | Merge pull request #1796 from nextcloud/oc_fav-reportLukas Reschke2016-10-202-4/+6
|\ \ \ | |_|/ |/| | Make it possible to filter by tags with REPORT method
| * | Make it possible to filter by tags with REPORT methodVincent Petry2016-10-192-4/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Enhanced the REPORT method on the Webdav endpoint and added a "oc:favorite" filter rule. When set, it will return a flat list of results filtered with only favorite files. The web UI was also adjusted to use this REPORT method instead of the private API endpoint. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | | Merge pull request #1768 from nextcloud/more-filepickerJan-Christoph Borchardt2016-10-206-76/+113
|\ \ \ | | | | | | | | More filepicker improvements
| * | | Improve the stylingMorris Jobke2016-10-202-2/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * remove the scrollbar (content did an overflow due to a min-width) * have proper padding on the right too - padding is 15px on all sides for .oc-dialog Signed-off-by: Morris Jobke <hey@morrisjobke.de>
| * | | add proper left margin for filepicker titleJan-Christoph Borchardt2016-10-191-0/+1
| | | | | | | | | | | | | | | | Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
| * | | fix filepicker with no mimetype filterRobin Appelman2016-10-191-3/+6
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
| * | | filepicker: improve layout and styleJan-Christoph Borchardt2016-10-193-22/+26
| | | | | | | | | | | | | | | | Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
| * | | Use a table for the filepicker list and add size columnRobin Appelman2016-10-194-41/+57
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
| * | | use fileclient to get the filelist for the filepickerRobin Appelman2016-10-191-12/+17
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
| * | | Allow selecting a folder after using the breadcrumbRobin Appelman2016-10-191-1/+1
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
| * | | Allow selecting the root folderRobin Appelman2016-10-191-1/+5
| |/ / | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | Remove deprecated breadcrumbs implementationMorris Jobke2016-10-201-117/+0
| | | | | | | | | | | | | | | | | | * was replaced by the version in files/ Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | | Remove OC.localStorage and object methodMorris Jobke2016-10-201-76/+0
| | | | | | | | | | | | | | | | | | | | | * use the localstorage APIs of the browser instead * use new Object() instead Signed-off-by: Morris Jobke <hey@morrisjobke.de>