nextcloud-server.git - Nextcloud server, a safe home for all your data: https://github.com/nextcloud/server

	Commit message (Expand)	Author	Age	Files	Lines
*	Don't perform CSRF check on OCS routes with Bearer auth	Roeland Jago Douma	2018-02-08	1	-2/+8
*	Move passwordconfirmation to its own midleware	Roeland Jago Douma	2018-01-02	2	-28/+82
*	disable password confirmation with SSO	Bjoern Schiessle	2018-01-02	1	-2/+16
*	Update license headers	Morris Jobke	2017-11-06	6	-2/+11
*	Use proper DI for security middleware for app enabled check	Morris Jobke	2017-10-24	1	-2/+8
*	Handle SameSiteCookie check for index.php in AppFramework Middleware	Roeland Jago Douma	2017-09-24	2	-0/+144
*	Remove explicit type hints for Controller	Lukas Reschke	2017-08-01	4	-10/+10
*	Merge pull request #5907 from nextcloud/add-metadata-to-throttle-call	Morris Jobke	2017-08-01	1	-1/+1
\|\
\| *	Add metadata to \OCP\AppFramework\Http\Response::throttle	Lukas Reschke	2017-07-27	1	-1/+1
* \|	Fix middleware implementations signatures	Roeland Jago Douma	2017-07-31	4	-10/+12
\|/
*	Check whether the $_SERVER['REQUEST_*'] vars exist before using them	Joas Schilling	2017-05-15	1	-6/+5
*	Remove unused use statements	Morris Jobke	2017-04-22	1	-1/+0
*	Make BruteForceProtection annotation more clever	Lukas Reschke	2017-04-13	2	-14/+84
*	Move to dedicated MiddleWare	Lukas Reschke	2017-04-13	2	-35/+144
*	Add support for ratelimiting via annotations	Lukas Reschke	2017-04-13	1	-11/+36
*	handle optional annotation parameters	Bjoern Schiessle	2017-01-18	1	-1/+1
*	introduce brute force protection for api calls	Bjoern Schiessle	2017-01-18	1	-1/+13
*	Allow to overwrite the message which we already do in SubadminMiddleware	Joas Schilling	2016-12-08	1	-2/+2
*	Merge pull request #2066 from nextcloud/fix-redirect-double-encoding	Morris Jobke	2016-11-29	1	-1/+1
\|\
\| *	do not double encode the redirect url	Christoph Wurst	2016-11-09	1	-1/+1
* \|	Add the 15 seconds to the window, instead of removing	Joas Schilling	2016-11-18	1	-1/+1
* \|	Introduce PasswordConfirmRequired annotation	Joas Schilling	2016-11-18	2	-0/+51
\|/
*	Move browserSupportsCspV3 to CSPNonceManager	Roeland Jago Douma	2016-10-25	1	-19/+8
*	Add support for CSP nonces	Lukas Reschke	2016-10-24	1	-1/+28
*	Add trict CSP to OCS responses	Roeland Jago Douma	2016-09-15	1	-0/+5
*	We should properly check for 'true' instaed of the bool	Roeland Jago Douma	2016-08-01	1	-1/+1
*	Dark hackery to not always disable CSRF for OCS controllers	Roeland Jago Douma	2016-07-29	1	-2/+10
*	Fix others	Joas Schilling	2016-07-21	8	-12/+22
*	Merge pull request #479 from nextcloud/add-bruteforce-throttler	Lukas Reschke	2016-07-21	1	-14/+11
\|\
\| *	Implement brute force protection	Lukas Reschke	2016-07-20	1	-14/+11
* \|	[master] Port Same-Site Cookies to master	Lukas Reschke	2016-07-20	2	-1/+46
\|/
*	add PasswordLoginForbiddenException	Christoph Wurst	2016-06-17	1	-2/+7
*	create session token on all APIs	Christoph Wurst	2016-06-13	1	-1/+1
*	use client login method on CORS routes	Christoph Wurst	2016-06-08	1	-6/+6
*	Update license headers	Lukas Reschke	2016-05-26	7	-7/+14
*	Fix inconsistent nameing of AppFramework	Roeland Jago Douma	2016-04-22	5	-12/+12
*	Move \OC\AppFramework to PSR-4	Roeland Jago Douma	2016-04-22	7	-0/+554