| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
| |
gets renamed/restored, as long as we
are in the storage wrapper the file cache isn't up-to-date
|
| |
|
| |
|
|
|
|
| |
Fixes https://github.com/owncloud/core/issues/16014
|
|
|
|
| |
Fixes https://github.com/owncloud/core/issues/16006
|
| |
|
|
|
|
| |
'OC\Encryption\HookManager'
|
| |
|
|\
| |
| | |
Dont hide exceptions master
|
| |
| |
| |
| |
| |
| | |
Conflicts:
core/templates/login.php
lib/base.php
|
|\ \
| |/
|/| |
block cron when in single user mode
|
| | |
|
| | |
|
|/ |
|
|
|
|
| |
encrypted files even if encryption was disabled after files have been encrypted - prevents data corruption
|
|
|
|
| |
users with access to a file, needed to apply the recovery key to all files
|
|
|
|
| |
wrapping order
|
| |
|
| |
|
| |
|
|\
| |
| | |
core part of encryption 2.0
|
| |
| |
| |
| | |
encryption modules
|
|\ \
| | |
| | | |
Remove custom `arg_separator.output`
|
| |/
| |
| |
| |
| |
| | |
This seems unrequired nowadays and like a legacy fragment. It should be safe to remove.
Fixes https://github.com/owncloud/core/issues/14782
|
|/ |
|
| |
|
| |
|
|
|
|
| |
command line as well
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Caches divided up into two groups: distributed and local. 'Low latency' is an
alias for local caches, while the standard `create()` call tries to get
distributed caches first, then local caches.
Memcache backend is set in `config.php`, with the keys `memcache.local` and
`memcache.distributed`. If not set, `memcache.distributed` defaults to the value
of `memcache.local`.
|
|
|
|
|
|
|
|
|
|
| |
Doing this in the PHP code is not the right approach for multiple reasons:
1. A bug in the PHP code prevents them from being added to the response.
2. They are only added when something is served via PHP and not in other cases (that makes for example the newest IE UXSS which is not yet patched by Microsoft exploitable on ownCloud)
3. Some headers such as the Strict-Transport-Security might require custom modifications by administrators. This was not possible before and lead to buggy situations.
This pull request moves those headers out of the PHP code and adds a security check to the admin settings performed via JS.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This change will log all failures that prevent the CLI cronjob from happening to the database and display a warning to administrators when an error happened.
To test:
1. Configure some invalid CLI php.ini settings
2. Enable the CLI cronjob and run php cron.php
3. See the errors printed and also in the admin page
4. Configure the CLI settings correctly
5. Errors should be gone.
Fixes https://github.com/owncloud/core/issues/13994
|
|
|
|
| |
This reverts commit 6a1a4880f0d556fb090f19a5019fec31916f5c36.
|
|
|
|
|
|
|
|
|
|
| |
The current code path may trigger situations where the LDAP application is not yet loaded and thus problems with the authentication appeared.
In previous versions of ownCloud the authentication mechanism manually loaded these apps which is why this affects ownCloud 8 and master only for my knowledge. (certainly not 6, maybe 7)
Backport to 8 might be something to consider.
Fixes https://github.com/owncloud/core/issues/14469
|
| |
|
| |
|
| |
|
|\
| |
| | |
Manually type-cast all AJAX files
|
| |
| |
| |
| |
| |
| | |
This enforces proper types on POST and GET arguments where I considered it sensible. I didn't update some as I don't know what kind of values they would support :see_no_evil:
Fixes https://github.com/owncloud/core/issues/14196 for core
|
|\ \
| | |
| | | |
Fix invalid `ini_set` directives
|
| | |
| | |
| | |
| | | |
Somehow they got messed up. Because PHP does automatic type juggling this has worked before as well however it's not guaranteed that this might work in the future as well.
|
|\ \ \
| | | |
| | | |
| | | |
| | | | |
owncloud/revert-13879-add_debug_log_for_memcache_instantiation
Revert "add debug log for memcache instantiation"
|
| |/ / |
|
|/ /
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Due to a security hardening in 8.1 a missing value of empty trusted domains in the config would provoke an error as this was misused by a lot of users.
This caused a problem where the initial installation happened from another domain than 127.0.0.1 as in this case the domain was considered untrusted as no value was defined. However, this special case should not get intercepted.
To test:
- [ ] Installing ownCloud on 127.0.0.1 works
- [ ] Installing ownCloud on another domain / IP works
- [ ] When setting up ownCloud from 127.0.0.1 and accessing it from the domain above the trusted domain error should be shown if not specified in the config
Fixes https://github.com/owncloud/core/issues/14320
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This changeset removes the static class `OC_Request` and moves the functions either into `IRequest` which is accessible via `\OC::$server::->getRequest()` or into a separated `TrustedDomainHelper` class for some helper methods which should not be publicly exposed.
This changes only internal methods and nothing on the public API. Some public functions in `util.php` have been deprecated though in favour of the new non-static functions.
Unfortunately some part of this code uses things like `__DIR__` and thus is not completely unit-testable. Where tests where possible they ahve been added though.
Fixes https://github.com/owncloud/core/issues/13976 which was requested in https://github.com/owncloud/core/pull/13973#issuecomment-73492969
|
| | |
|