summaryrefslogtreecommitdiffstats
path: root/lib/private/AppFramework/Middleware/Security/SecurityMiddleware.php
Commit message (Expand)AuthorAgeFilesLines
* Don't perform CSRF check on OCS routes with Bearer authRoeland Jago Douma2018-02-081-2/+8
* Move passwordconfirmation to its own midlewareRoeland Jago Douma2018-01-021-28/+1
* disable password confirmation with SSOBjoern Schiessle2018-01-021-2/+16
* Update license headersMorris Jobke2017-11-061-0/+1
* Use proper DI for security middleware for app enabled checkMorris Jobke2017-10-241-2/+8
* Remove explicit type hints for ControllerLukas Reschke2017-08-011-3/+3
* Fix middleware implementations signaturesRoeland Jago Douma2017-07-311-3/+3
* Check whether the $_SERVER['REQUEST_*'] vars exist before using themJoas Schilling2017-05-151-6/+5
* Make BruteForceProtection annotation more cleverLukas Reschke2017-04-131-14/+1
* Move to dedicated MiddleWareLukas Reschke2017-04-131-35/+10
* Add support for ratelimiting via annotationsLukas Reschke2017-04-131-11/+36
* handle optional annotation parametersBjoern Schiessle2017-01-181-1/+1
* introduce brute force protection for api callsBjoern Schiessle2017-01-181-1/+13
* Merge pull request #2066 from nextcloud/fix-redirect-double-encodingMorris Jobke2016-11-291-1/+1
|\
| * do not double encode the redirect urlChristoph Wurst2016-11-091-1/+1
* | Add the 15 seconds to the window, instead of removingJoas Schilling2016-11-181-1/+1
* | Introduce PasswordConfirmRequired annotationJoas Schilling2016-11-181-0/+14
|/
* Move browserSupportsCspV3 to CSPNonceManagerRoeland Jago Douma2016-10-251-19/+8
* Add support for CSP noncesLukas Reschke2016-10-241-1/+28
* Add trict CSP to OCS responsesRoeland Jago Douma2016-09-151-0/+5
* We should properly check for 'true' instaed of the boolRoeland Jago Douma2016-08-011-1/+1
* Dark hackery to not always disable CSRF for OCS controllersRoeland Jago Douma2016-07-291-2/+10
* Fix othersJoas Schilling2016-07-211-2/+3
* [master] Port Same-Site Cookies to masterLukas Reschke2016-07-201-1/+10
* Update license headersLukas Reschke2016-05-261-1/+3
* Fix inconsistent nameing of AppFrameworkRoeland Jago Douma2016-04-221-4/+4
* Move \OC\AppFramework to PSR-4Roeland Jago Douma2016-04-221-0/+215