| Commit message (Expand) | Author | Age | Files | Lines |
* | Add CSP frame-ancestors support | Thomas Citharel | 2017-09-15 | 1 | -0/+14 |
* | add prefix to user and system keys to avoid name collisions | Bjoern Schiessle | 2017-08-10 | 1 | -2/+3 |
* | extend the identity proof manager to allow system wide key pairs | Bjoern Schiessle | 2017-08-10 | 1 | -11/+44 |
* | null is a valid parameter | Lukas Reschke | 2017-08-01 | 1 | -2/+2 |
* | Replace wrong PHPDocs | Lukas Reschke | 2017-08-01 | 1 | -1/+1 |
* | More phpstorm inspection fixes | Roeland Jago Douma | 2017-07-24 | 3 | -6/+6 |
* | Add Phan plugin to check for SQL injections | Lukas Reschke | 2017-07-20 | 1 | -0/+1 |
* | Add bruteforce capabilities | Roeland Jago Douma | 2017-07-13 | 1 | -0/+52 |
* | Write cert bundle to tmp file first | Roeland Jago Douma | 2017-07-12 | 1 | -3/+16 |
* | Automatic creation of Identity manager | Joas Schilling | 2017-05-10 | 1 | -3/+4 |
* | Do not write and read rootcerts.crt at the same time | Roeland Jago Douma | 2017-05-09 | 1 | -2/+3 |
* | Mark IP as whitelisted if brute force protection is disabled | Lukas Reschke | 2017-05-01 | 1 | -0/+4 |
* | Remove unused use statements | Morris Jobke | 2017-04-22 | 2 | -3/+0 |
* | Remove expired attempts | Lukas Reschke | 2017-04-13 | 2 | -12/+32 |
* | Add support for ratelimiting via annotations | Lukas Reschke | 2017-04-13 | 6 | -65/+400 |
* | Respect bruteforce settings in the Throttler | Roeland Jago Douma | 2017-04-02 | 1 | -0/+65 |
* | introduce brute force protection for api calls | Bjoern Schiessle | 2017-01-18 | 1 | -3/+10 |
* | dont write a certificate bundle if the shipped ca bundle is empty | Robin Appelman | 2017-01-09 | 1 | -3/+17 |
* | Safari CSPv3 support is sub-par | Lukas Reschke | 2016-12-14 | 1 | -2/+0 |
* | Add Identityproof tests | Roeland Jago Douma | 2016-11-24 | 1 | -23/+4 |
* | Add a signer class for signing | Lukas Reschke | 2016-11-21 | 2 | -9/+148 |
* | Add identity proof | Lukas Reschke | 2016-11-21 | 1 | -8/+7 |
* | Add private | Lukas Reschke | 2016-11-21 | 2 | -0/+136 |
* | Fix missing update of session, when it was already used. | Joas Schilling | 2016-11-02 | 1 | -0/+7 |
* | Fix CSRF token generation / validation | Leon Klingele | 2016-11-02 | 1 | -3/+3 |
* | Identify Chromium as Chrome | Joas Schilling | 2016-10-26 | 1 | -2/+2 |
* | Missing returns + autoloader file | Lukas Reschke | 2016-10-25 | 1 | -0/+1 |
* | Move browserSupportsCspV3 to CSPNonceManager | Roeland Jago Douma | 2016-10-25 | 1 | -1/+28 |
* | Add ContentSecurityPolicyNonceManager | Lukas Reschke | 2016-10-24 | 1 | -0/+54 |
* | Add support for CSP nonces | Lukas Reschke | 2016-10-24 | 2 | -4/+19 |
* | dont get bruteforce delay twice | Robin Appelman | 2016-08-29 | 1 | -1/+4 |
* | Update with robin | Joas Schilling | 2016-07-21 | 2 | -2/+2 |
* | Fix others | Joas Schilling | 2016-07-21 | 14 | -15/+32 |
* | JSON encode the values | Lukas Reschke | 2016-07-20 | 1 | -1/+1 |
* | Implement brute force protection | Lukas Reschke | 2016-07-20 | 1 | -0/+230 |
* | add test for needsRebundling() check | Bjoern Schiessle | 2016-07-11 | 1 | -1/+11 |
* | always check the mtime of the system bundle and additionally the user specifi... | Bjoern Schiessle | 2016-07-08 | 1 | -1/+2 |
* | Disallow certain malformed domain names even if they match the trusted domain... | Johannes Ernst | 2016-07-06 | 1 | -3/+6 |
* | Trusted domain wildcard checking made shorter, supporting multiple * | Johannes Ernst | 2016-07-06 | 1 | -32/+8 |
* | Duh, no 'next' in PHP. | Johannes Ernst | 2016-07-06 | 1 | -2/+2 |
* | Allow wildcard * to be used in trusted domains, to support setups where no re... | Johannes Ernst | 2016-07-05 | 1 | -2/+30 |
* | Update license headers | Lukas Reschke | 2016-05-26 | 12 | -13/+13 |
* | [master] Ignore certificate file if it starts with file:// | Lukas Reschke | 2016-04-21 | 1 | -0/+7 |
* | Move \OC\Security to PSR-4 | Roeland Jago Douma | 2016-04-14 | 13 | -0/+1537 |