summaryrefslogtreecommitdiffstats
path: root/lib/private/Security
Commit message (Expand)AuthorAgeFilesLines
* Fix CSJoas Schilling2020-08-191-0/+1
* Correctly return ms delay when at maxJoas Schilling2020-08-191-3/+4
* Add missing defaultJoas Schilling2020-08-191-1/+1
* Simplify array filterJoas Schilling2020-08-191-2/+1
* Fix wrong doc + type hintJoas Schilling2020-08-191-2/+2
* Only throw when also the last 30 mins were attackingJoas Schilling2020-08-191-8/+9
* Make the throttling O(2^n) instead of O(n^n)Joas Schilling2020-08-191-9/+9
* Make Throttler strictJoas Schilling2020-08-191-9/+10
* Split delay calculation from getting the attemptsJoas Schilling2020-08-191-5/+17
* Let the database count the entriesJoas Schilling2020-08-191-2/+6
* Send "429 Too Many Requests" in case of brute force protectionJoas Schilling2020-08-191-1/+21
* Prefer typed event over string based onesMorris Jobke2020-08-102-2/+2
* Merge pull request #20005 from joeried/occ-remove-bruteforce-attempts-by-ipMorris Jobke2020-05-251-6/+29
|\
| * Fix code styleMorris Jobke2020-05-251-1/+1
| * Implement occ command security:bruteforceattemps:reset-for-ipJohannes Riedel2020-03-191-6/+29
* | Use random_bytesRoeland Jago Douma2020-05-111-7/+13
* | Apply Argon2 options for Argon2id hashing as wellMichaIng2020-05-011-1/+1
* | Fix Argon2 options checksMichaIng2020-04-301-10/+5
* | Update license headers for 19Christoph Wurst2020-04-2915-1/+16
* | fix credentialsManager documentation and ensure userId to be used as stringArthur Schiwon2020-04-151-6/+6
* | Add visibility to all constantsChristoph Wurst2020-04-102-2/+2
* | Format control structures, classes, methods and functionChristoph Wurst2020-04-1018-46/+37
* | Use elseif instead of else ifChristoph Wurst2020-04-101-1/+1
* | Unify function spacing to PSR2 recommendationChristoph Wurst2020-04-092-2/+2
* | Use exactly one empty line after the namespace declarationChristoph Wurst2020-04-091-0/+1
* | Fix (array) indent style to always use one tabChristoph Wurst2020-04-091-4/+4
* | Update the license headers for Nextcloud 19Christoph Wurst2020-03-315-2/+5
* | Use the short array syntax, everywhereChristoph Wurst2020-03-261-4/+4
|/
* fix safari useragent for versions with 3 digitsPavel Krasikov2020-03-141-1/+1
* Add Argon2id supportRoeland Jago Douma2020-02-071-21/+13
* Allow selecting the hashing algorithmRoeland Jago Douma2020-02-031-11/+27
* ignore values that undershoot the minimum, go with defaultArthur Schiwon2020-01-221-5/+13
* use getSystemValueIntblizzz2020-01-211-3/+3
* expose Argon2 options (as we did for bcrypt)Arthur Schiwon2020-01-201-0/+6
* Update license headers for 18Christoph Wurst2019-12-202-0/+2
* handle IPv6 addresses with an explict incoming interface at the end (e.g fe80...Konrad Bucheli2019-12-101-0/+4
* Move overwritehost check to isTrustedDomainJulius Härtl2019-12-071-0/+5
* Update license headersChristoph Wurst2019-12-0526-26/+86
* Some php-cs fixesRoeland Jago Douma2019-11-224-5/+6
* make TrustedDomainHelper case insensitiveJohannes Koenig2019-10-061-1/+1
* Harden identifyproof openssl codeRoeland Jago Douma2019-09-141-7/+28
* Fix report of phpstan in LimiterRoeland Jago Douma2019-08-191-10/+4
* Add feature policy headerRoeland Jago Douma2019-08-102-0/+152
* Add form-action CSP elementRoeland Jago Douma2019-07-311-0/+9
* setting unsafe-eval is deprecatedRoeland Jago Douma2019-07-301-0/+2
* Add support for CSP_NONCE server variableSam Bull2019-07-181-1/+5
* Add an event to edit the CSPRoeland Jago Douma2019-07-081-0/+12
* Merge pull request #13327 from nextcloud/allow-bracket-notation-for-remove-ip...Morris Jobke2019-03-061-0/+3
|\
| * Allow bracket IPv6 address format inside IPAdress NormalizerThomas Citharel2019-01-031-0/+3
* | Fix the thorrtler whitelist bitmaskRoeland Jago Douma2019-02-111-2/+4
|/