aboutsummaryrefslogtreecommitdiffstats
path: root/lib/private/AppFramework/Middleware/Security
Commit message (Expand)AuthorAgeFilesLines
* Merge pull request #38261 from fsamapoor/replace_strpos_calls_in_lib_privateRobin Appelman2023-06-011-1/+1
|\
| * Refactors "strpos" calls in lib/private to improve code readability.Faraz Samapoor2023-05-151-1/+1
* | fix(middleware): Also abort the request when reaching max delay in afterContr...Joas Schilling2023-05-151-22/+30
|/
* feat(security): Add PHP \Attribute for remaining security annotationsJoas Schilling2023-04-254-27/+132
* feat(ratelimit): Add Attributes support to rate limit middlewareJoas Schilling2023-04-241-41/+77
* fix(security)!: Use consistent HTTP status for strict cookie checksChristoph Wurst2023-04-171-0/+3
* Add a debug message when throttling without definingJoas Schilling2023-03-081-10/+9
* feat(middleware): Migrate BruteForceProtection annotation to PHP Attribute an...Joas Schilling2023-03-081-5/+43
* fix(CORS): CORS should only be bypassed on `PublicPage` if not logged in to p...Ferdinand Thiessen2023-02-161-1/+1
* composer run cs:fixCôme Chilliet2023-01-205-10/+5
* Allow CSRF on CORS routesJonas Rittershofer2022-09-211-0/+4
* Update core to PHP 7.4 standardCarl Schwan2022-05-201-11/+3
* Add direct arg to login flowVincent Petry2022-03-281-0/+3
* Check style updateCarl Schwan2022-01-131-1/+1
* Pass username prefill through unauthenticated request redirectsJulius Härtl2021-12-291-0/+4
* Add admin privilege delegation for admin settingsCarl Schwan2021-09-291-5/+42
* Update php licensesJohn Molakvoæ (skjnldsv)2021-06-0418-31/+14
* fix error when using CORS with no auth credentialskorelstar2021-05-181-5/+4
* Merge pull request #26591 from nextcloud/techdebt/noid/less-iloggerChristoph Wurst2021-04-271-6/+5
|\
| * Less ILoggerJoas Schilling2021-04-271-6/+5
* | Fix ratelimit templateJoas Schilling2021-04-271-14/+7
|/
* Format code to a single space around binary operatorsChristoph Wurst2020-10-052-2/+2
* Update the license headers for Nextcloud 20Christoph Wurst2020-08-242-0/+3
* Fix CSJoas Schilling2020-08-191-0/+1
* Send "429 Too Many Requests" in case of brute force protectionJoas Schilling2020-08-191-1/+27
* Update SecurityMiddleware.phpHolger Hees2020-07-061-1/+1
* Update license headers for 19Christoph Wurst2020-04-295-0/+5
* Format control structures, classes, methods and functionChristoph Wurst2020-04-109-32/+28
* Unify function spacing to PSR2 recommendationChristoph Wurst2020-04-091-3/+3
* Fix (array) indent style to always use one tabChristoph Wurst2020-04-091-1/+1
* Remove unused importsChristoph Wurst2020-03-251-5/+0
* Fix loaded controller checkJoas Schilling2020-01-211-1/+1
* Update license headersChristoph Wurst2019-12-0518-21/+37
* Some php-cs fixesRoeland Jago Douma2019-11-223-7/+8
* Merge pull request #17850 from nextcloud/bugfix/noid/mark-spreed-as-active-on...Joas Schilling2019-11-201-0/+6
|\
| * Make phan happy ;)Daniel Kesselberg2019-11-191-1/+2
| * Mark "Talk" active on /call/token URLsJoas Schilling2019-11-121-0/+5
* | Fixes a 500 without useridArthur Schiwon2019-11-161-5/+0
|/
* Add feature policy headerRoeland Jago Douma2019-08-101-0/+70
* Split up security middlewareRoeland Jago Douma2019-07-272-40/+80
* Make it possible to show admin settings for sub adminsChristoph Wurst2019-05-231-1/+12
* Do not do redirect handling when loggin outRoeland Jago Douma2019-02-062-0/+97
* Update password confirmation middlewareRoeland Jago Douma2018-11-021-0/+8
* add global site selector as user back-end which doesn't support password conf...Bjoern Schiessle2018-10-271-1/+3
* Do not use file as template parameterRoeland Jago Douma2018-08-091-1/+1
* move log constants to ILoggerArthur Schiwon2018-04-261-1/+1
* Add testsRoeland Jago Douma2018-03-081-18/+8
* Make SecurityMiddleware strictRoeland Jago Douma2018-03-081-10/+9
* Do not throw AppNotEnabledException for app public pages - refs #6962, refs #...Julien Veyssier2018-02-281-1/+2
* Provide translated error message for permission errorMorris Jobke2018-02-262-3/+10