| Commit message (Expand) | Author | Age | Files | Lines |
... | |
* | Emit to load additionalscripts | Roeland Jago Douma | 2019-01-31 | 1 | -0/+56 |
* | Update password confirmation middleware | Roeland Jago Douma | 2018-11-02 | 1 | -0/+8 |
* | add global site selector as user back-end which doesn't support password conf... | Bjoern Schiessle | 2018-10-27 | 1 | -1/+3 |
* | Do not use file as template parameter | Roeland Jago Douma | 2018-08-09 | 1 | -1/+1 |
* | Add PublicShareMiddlewareTest | Roeland Jago Douma | 2018-06-20 | 1 | -1/+1 |
* | Don't allow public share pages if link sharing is disabled | Roeland Jago Douma | 2018-06-20 | 1 | -1/+27 |
* | Move public preview endpoint over | Roeland Jago Douma | 2018-06-20 | 1 | -1/+2 |
* | Add the new PublicShareController and PublicShareMiddleware | Roeland Jago Douma | 2018-06-20 | 2 | -0/+92 |
* | move log constants to ILogger | Arthur Schiwon | 2018-04-26 | 1 | -1/+1 |
* | Add tests | Roeland Jago Douma | 2018-03-08 | 1 | -18/+8 |
* | Make SecurityMiddleware strict | Roeland Jago Douma | 2018-03-08 | 1 | -10/+9 |
* | Do not throw AppNotEnabledException for app public pages - refs #6962, refs #... | Julien Veyssier | 2018-02-28 | 1 | -1/+2 |
* | Provide translated error message for permission error | Morris Jobke | 2018-02-26 | 2 | -3/+10 |
* | Fix tests | Roeland Jago Douma | 2018-02-21 | 1 | -1/+1 |
* | Make the middlewareDispatcher strict | Roeland Jago Douma | 2018-02-21 | 1 | -9/+10 |
* | Remove unused import statements | Morris Jobke | 2018-02-14 | 2 | -2/+0 |
* | Don't perform CSRF check on OCS routes with Bearer auth | Roeland Jago Douma | 2018-01-29 | 1 | -2/+8 |
* | Use $var[] = $a instead of array_push - 2x faster | Morris Jobke | 2018-01-25 | 1 | -1/+1 |
* | Properly log the full exception instead of only the message | Morris Jobke | 2018-01-23 | 1 | -1/+4 |
* | Move passwordconfirmation to its own midleware | Roeland Jago Douma | 2018-01-02 | 2 | -28/+82 |
* | disable password confirmation with SSO | Bjoern Schiessle | 2018-01-02 | 1 | -2/+16 |
* | Update license headers | Morris Jobke | 2017-11-06 | 8 | -3/+15 |
* | Use proper DI for security middleware for app enabled check | Morris Jobke | 2017-10-24 | 1 | -2/+8 |
* | Handle SameSiteCookie check for index.php in AppFramework Middleware | Roeland Jago Douma | 2017-09-24 | 2 | -0/+144 |
* | Remove explicit type hints for Controller | Lukas Reschke | 2017-08-01 | 6 | -15/+15 |
* | Merge pull request #5907 from nextcloud/add-metadata-to-throttle-call | Morris Jobke | 2017-08-01 | 1 | -1/+1 |
|\ |
|
| * | Add metadata to \OCP\AppFramework\Http\Response::throttle | Lukas Reschke | 2017-07-27 | 1 | -1/+1 |
* | | Fix middleware implementations signatures | Roeland Jago Douma | 2017-07-31 | 6 | -23/+26 |
|/ |
|
* | Check whether the $_SERVER['REQUEST_*'] vars exist before using them | Joas Schilling | 2017-05-15 | 1 | -6/+5 |
* | Remove unused use statements | Morris Jobke | 2017-04-22 | 1 | -1/+0 |
* | Make BruteForceProtection annotation more clever | Lukas Reschke | 2017-04-13 | 2 | -14/+84 |
* | Move to dedicated MiddleWare | Lukas Reschke | 2017-04-13 | 2 | -35/+144 |
* | Add support for ratelimiting via annotations | Lukas Reschke | 2017-04-13 | 1 | -11/+36 |
* | handle optional annotation parameters | Bjoern Schiessle | 2017-01-18 | 1 | -1/+1 |
* | introduce brute force protection for api calls | Bjoern Schiessle | 2017-01-18 | 1 | -1/+13 |
* | Allow to overwrite the message which we already do in SubadminMiddleware | Joas Schilling | 2016-12-08 | 1 | -2/+2 |
* | Merge pull request #2066 from nextcloud/fix-redirect-double-encoding | Morris Jobke | 2016-11-29 | 1 | -1/+1 |
|\ |
|
| * | do not double encode the redirect url | Christoph Wurst | 2016-11-09 | 1 | -1/+1 |
* | | Add the 15 seconds to the window, instead of removing | Joas Schilling | 2016-11-18 | 1 | -1/+1 |
* | | Introduce PasswordConfirmRequired annotation | Joas Schilling | 2016-11-18 | 2 | -0/+51 |
|/ |
|
* | Move browserSupportsCspV3 to CSPNonceManager | Roeland Jago Douma | 2016-10-25 | 1 | -19/+8 |
* | Add support for CSP nonces | Lukas Reschke | 2016-10-24 | 1 | -1/+28 |
* | Add trict CSP to OCS responses | Roeland Jago Douma | 2016-09-15 | 1 | -0/+5 |
* | Split OCS version handling | Roeland Jago Douma | 2016-09-06 | 1 | -38/+47 |
* | Extend OCSMiddleware | Roeland Jago Douma | 2016-08-14 | 1 | -2/+60 |
* | We should properly check for 'true' instaed of the bool | Roeland Jago Douma | 2016-08-01 | 1 | -1/+1 |
* | Dark hackery to not always disable CSRF for OCS controllers | Roeland Jago Douma | 2016-07-29 | 1 | -2/+10 |
* | Support subdir in the OCS v2 endpoint | Roeland Jago Douma | 2016-07-27 | 1 | -1/+1 |
* | Set proper status code in OCS AppFramework Middleware | Roeland Jago Douma | 2016-07-22 | 1 | -1/+6 |
* | Merge pull request #507 from nextcloud/run-le-script | Morris Jobke | 2016-07-21 | 11 | -14/+27 |
|\ |
|