summaryrefslogtreecommitdiffstats
path: root/lib/private/Security
Commit message (Expand)AuthorAgeFilesLines
* Automatic creation of Identity managerJoas Schilling2017-05-101-3/+4
* Do not write and read rootcerts.crt at the same timeRoeland Jago Douma2017-05-091-2/+3
* Mark IP as whitelisted if brute force protection is disabledLukas Reschke2017-05-011-0/+4
* Remove unused use statementsMorris Jobke2017-04-222-3/+0
* Remove expired attemptsLukas Reschke2017-04-132-12/+32
* Add support for ratelimiting via annotationsLukas Reschke2017-04-136-65/+400
* Respect bruteforce settings in the ThrottlerRoeland Jago Douma2017-04-021-0/+65
* introduce brute force protection for api callsBjoern Schiessle2017-01-181-3/+10
* dont write a certificate bundle if the shipped ca bundle is emptyRobin Appelman2017-01-091-3/+17
* Safari CSPv3 support is sub-parLukas Reschke2016-12-141-2/+0
* Add Identityproof testsRoeland Jago Douma2016-11-241-23/+4
* Add a signer class for signingLukas Reschke2016-11-212-9/+148
* Add identity proofLukas Reschke2016-11-211-8/+7
* Add privateLukas Reschke2016-11-212-0/+136
* Fix missing update of session, when it was already used.Joas Schilling2016-11-021-0/+7
* Fix CSRF token generation / validationLeon Klingele2016-11-021-3/+3
* Identify Chromium as ChromeJoas Schilling2016-10-261-2/+2
* Missing returns + autoloader fileLukas Reschke2016-10-251-0/+1
* Move browserSupportsCspV3 to CSPNonceManagerRoeland Jago Douma2016-10-251-1/+28
* Add ContentSecurityPolicyNonceManagerLukas Reschke2016-10-241-0/+54
* Add support for CSP noncesLukas Reschke2016-10-242-4/+19
* dont get bruteforce delay twiceRobin Appelman2016-08-291-1/+4
* Update with robinJoas Schilling2016-07-212-2/+2
* Fix othersJoas Schilling2016-07-2114-15/+32
* JSON encode the valuesLukas Reschke2016-07-201-1/+1
* Implement brute force protectionLukas Reschke2016-07-201-0/+230
* add test for needsRebundling() checkBjoern Schiessle2016-07-111-1/+11
* always check the mtime of the system bundle and additionally the user specifi...Bjoern Schiessle2016-07-081-1/+2
* Disallow certain malformed domain names even if they match the trusted domain...Johannes Ernst2016-07-061-3/+6
* Trusted domain wildcard checking made shorter, supporting multiple *Johannes Ernst2016-07-061-32/+8
* Duh, no 'next' in PHP.Johannes Ernst2016-07-061-2/+2
* Allow wildcard * to be used in trusted domains, to support setups where no re...Johannes Ernst2016-07-051-2/+30
* Update license headersLukas Reschke2016-05-2612-13/+13
* [master] Ignore certificate file if it starts with file://Lukas Reschke2016-04-211-0/+7
* Move \OC\Security to PSR-4Roeland Jago Douma2016-04-1413-0/+1537