summaryrefslogtreecommitdiffstats
path: root/lib/private/Security
Commit message (Expand)AuthorAgeFilesLines
* Merge pull request #20005 from joeried/occ-remove-bruteforce-attempts-by-ipMorris Jobke2020-05-251-6/+29
|\
| * Fix code styleMorris Jobke2020-05-251-1/+1
| * Implement occ command security:bruteforceattemps:reset-for-ipJohannes Riedel2020-03-191-6/+29
* | Use random_bytesRoeland Jago Douma2020-05-111-7/+13
* | Apply Argon2 options for Argon2id hashing as wellMichaIng2020-05-011-1/+1
* | Fix Argon2 options checksMichaIng2020-04-301-10/+5
* | Update license headers for 19Christoph Wurst2020-04-2915-1/+16
* | fix credentialsManager documentation and ensure userId to be used as stringArthur Schiwon2020-04-151-6/+6
* | Add visibility to all constantsChristoph Wurst2020-04-102-2/+2
* | Format control structures, classes, methods and functionChristoph Wurst2020-04-1018-46/+37
* | Use elseif instead of else ifChristoph Wurst2020-04-101-1/+1
* | Unify function spacing to PSR2 recommendationChristoph Wurst2020-04-092-2/+2
* | Use exactly one empty line after the namespace declarationChristoph Wurst2020-04-091-0/+1
* | Fix (array) indent style to always use one tabChristoph Wurst2020-04-091-4/+4
* | Update the license headers for Nextcloud 19Christoph Wurst2020-03-315-2/+5
* | Use the short array syntax, everywhereChristoph Wurst2020-03-261-4/+4
|/
* fix safari useragent for versions with 3 digitsPavel Krasikov2020-03-141-1/+1
* Add Argon2id supportRoeland Jago Douma2020-02-071-21/+13
* Allow selecting the hashing algorithmRoeland Jago Douma2020-02-031-11/+27
* ignore values that undershoot the minimum, go with defaultArthur Schiwon2020-01-221-5/+13
* use getSystemValueIntblizzz2020-01-211-3/+3
* expose Argon2 options (as we did for bcrypt)Arthur Schiwon2020-01-201-0/+6
* Update license headers for 18Christoph Wurst2019-12-202-0/+2
* handle IPv6 addresses with an explict incoming interface at the end (e.g fe80...Konrad Bucheli2019-12-101-0/+4
* Move overwritehost check to isTrustedDomainJulius Härtl2019-12-071-0/+5
* Update license headersChristoph Wurst2019-12-0526-26/+86
* Some php-cs fixesRoeland Jago Douma2019-11-224-5/+6
* make TrustedDomainHelper case insensitiveJohannes Koenig2019-10-061-1/+1
* Harden identifyproof openssl codeRoeland Jago Douma2019-09-141-7/+28
* Fix report of phpstan in LimiterRoeland Jago Douma2019-08-191-10/+4
* Add feature policy headerRoeland Jago Douma2019-08-102-0/+152
* Add form-action CSP elementRoeland Jago Douma2019-07-311-0/+9
* setting unsafe-eval is deprecatedRoeland Jago Douma2019-07-301-0/+2
* Add support for CSP_NONCE server variableSam Bull2019-07-181-1/+5
* Add an event to edit the CSPRoeland Jago Douma2019-07-081-0/+12
* Merge pull request #13327 from nextcloud/allow-bracket-notation-for-remove-ip...Morris Jobke2019-03-061-0/+3
|\
| * Allow bracket IPv6 address format inside IPAdress NormalizerThomas Citharel2019-01-031-0/+3
* | Fix the thorrtler whitelist bitmaskRoeland Jago Douma2019-02-111-2/+4
|/
* Remove deprecated functions from SecureRandomRoeland Jago Douma2018-12-071-28/+0
* Throw exception if decryption failsRoeland Jago Douma2018-11-141-4/+10
* Merge pull request #11914 from nextcloud/csp/report-uriMorris Jobke2018-10-231-0/+8
|\
| * Add report-uri to CSPRoeland Jago Douma2018-10-211-0/+8
* | Add nonce for Safari 12+Roeland Jago Douma2018-10-211-0/+2
|/
* Deprecate the childSrc functionsRoeland Jago Douma2018-09-041-0/+2
* Add workerSrc to CSPRoeland Jago Douma2018-09-041-0/+8
* Fix #9864: Decrease $maxDelay in Throttler.phpMark Berezovsky2018-06-151-1/+1
* Add ARGON2I support to the hasherRoeland Jago Douma2018-04-041-9/+36
* Make \OC\Security\IdentityProof strictRoeland Jago Douma2018-03-053-10/+13
* Merge pull request #8659 from nextcloud/csrf_token_strictRoeland Jago Douma2018-03-054-13/+17
|\
| * Make \OC\Security\CSRF strictRoeland Jago Douma2018-03-054-13/+17