summaryrefslogtreecommitdiffstats
path: root/lib/private/appframework
Commit message (Collapse)AuthorAgeFilesLines
* Move \OC\AppFramework to PSR-4Roeland Jago Douma2016-04-2222-3683/+0
| | | | * Also moved the autoloader setup a bit up since we need it in initpaths
* Move logout to controllerLukas Reschke2016-04-181-1/+1
| | | | Testable code. Yay.
* Move login form into controllerLukas Reschke2016-04-151-3/+6
| | | | First step on getting the authorisation stuff cleaned up. This is only for the login form, all other stuff is still where it is.
* lib: Fix typos (found by codespell)Stefan Weil2016-04-074-5/+5
| | | | Signed-off-by: Stefan Weil <sw@weilnetz.de>
* Add magical regex to catch browsersLukas Reschke2016-03-241-0/+8
|
* Check if request is sent from official ownCloud clientLukas Reschke2016-03-241-0/+3
| | | | | | There are authentication backends such as Shibboleth that do send no Basic Auth credentials for DAV requests. This means that the ownCloud DAV backend would consider these requests coming from an untrusted source and require higher levels of security checks. (e.g. a CSRF check) While an elegant solution would rely on authenticating via token (so that one can properly ensure that the request came indeed from a trusted client) this is a okay'ish workaround for this problem until we have something more reliable in the authentication code.
* Fix warning in request.phpRoeland Jago Douma2016-03-231-1/+8
| | | | | | | * Added proper @property tags * RunTimeException => RuntimeException Makes code analyzers happier
* Remove Scrutinizer Auto FixerLukas Reschke2016-03-011-1/+0
|
* Update author informationLukas Reschke2016-03-011-0/+1
| | | | Probably nice for the people that contributed to 9.0 to see themselves in the AUTHORS file :)
* Use IQueryBuilder::PARAM_* instead of \PDO::PARAM_*Joas Schilling2016-02-291-1/+2
|
* Add activities for commentsJoas Schilling2016-02-051-0/+4
|
* Add activities when a tag is (un-)assignedJoas Schilling2016-02-021-0/+4
|
* Add public API to give developers the possibility to adjust the global CSP ↵Lukas Reschke2016-01-282-6/+41
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | defaults Allows to inject something into the default content policy. This is for example useful when you're injecting Javascript code into a view belonging to another controller and cannot modify its Content-Security-Policy itself. Note that the adjustment is only applied to applications that use AppFramework controllers. To use this from your `app.php` use `\OC::$server->getContentSecurityPolicyManager()->addDefaultPolicy($policy)`, $policy has to be of type `\OCP\AppFramework\Http\ContentSecurityPolicy`. To test this add something like the following into an `app.php` of any enabled app: ``` $manager = \OC::$server->getContentSecurityPolicyManager(); $policy = new \OCP\AppFramework\Http\ContentSecurityPolicy(false); $policy->addAllowedFrameDomain('asdf'); $policy->addAllowedScriptDomain('yolo.com'); $policy->allowInlineScript(false); $manager->addDefaultPolicy($policy); $policy = new \OCP\AppFramework\Http\ContentSecurityPolicy(false); $policy->addAllowedFontDomain('yolo.com'); $manager->addDefaultPolicy($policy); $policy = new \OCP\AppFramework\Http\ContentSecurityPolicy(false); $policy->addAllowedFrameDomain('banana.com'); $manager->addDefaultPolicy($policy); ``` If you now open the files app the policy should be: ``` Content-Security-Policy:default-src 'none';script-src yolo.com 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data: blob:;font-src yolo.com 'self';connect-src 'self';media-src 'self';frame-src asdf banana.com 'self' ```
* [Share 2.0] Add getShareManager to OCP\IServerContainerRoeland Jago Douma2016-01-271-0/+4
|
* Add new CSRF manager for unit testing purposesLukas Reschke2016-01-251-19/+11
| | | | This adds a new CSRF manager for unit testing purposes, it's interface is based upon https://github.com/symfony/security-csrf. Due to some of our required custom changes it is however not possible to use the Symfony component directly.
* Merge pull request #21719 from owncloud/move-notification-api-to-ocpThomas Müller2016-01-221-0/+4
|\ | | | | Move the notification API to public namespace
| * Allow automatic injection of the ManagerJoas Schilling2016-01-221-0/+4
| |
* | Introduce CredentialsManager for storage of credentials in DBRobin McCorkell2016-01-181-0/+4
| | | | | | | | | | | | | | | | | | | | | | CredentialsManager performs a simple role, of storing and retrieving encrypted credentials from the database. Credentials are stored by user ID (which may be null) and credentials identifier. Credentials themselves may be of any type that can be JSON encoded. The rationale behind this is to avoid further (mis)use of oc_preferences, which was being used for all manner of data not related to user preferences.
* | Introduce IDBConnection::setValues()Robin McCorkell2016-01-181-0/+15
|/ | | | | setValues() attempts to insert a new row, or failing that, update an existing row. The ability to set preconditions is also available.
* Happy new year!Thomas Müller2016-01-1222-30/+44
|
* getLowStrengthGenerator does not do anything anymoreRoeland Jago Douma2016-01-111-1/+1
|
* Add 'OCP\Files\IMimeTypeDetector' to DI containerRoeland Jago Douma2016-01-071-0/+4
| | | | * Added test to server container as well
* prefer scalar type hints over phpdoc annotationBernhard Posselt2015-12-241-10/+12
| | | | | | use method exists lookup to be safe and not break on old hhvm versions add test that checks if type hint is preferred over annotation
* Register app containers in the OC containerJoas Schilling2015-12-181-0/+4
|
* Merge pull request #21135 from owncloud/add-polyfillThomas Müller2015-12-111-1/+1
|\ | | | | Add polyfills for PHP55, PHP56 and PHP70 functionalities
| * Use PHP polyfillsLukas Reschke2015-12-111-1/+1
| |
* | Scrutinizer Auto-FixesScrutinizer Auto-Fixer2015-12-101-1/+0
|/ | | | This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com
* Add type descriptionLukas Reschke2015-12-081-0/+2
| | | | Allows IDEs and static code analyzers. Would have saved me some minutes today :)
* Scrutinizer Auto-FixesScrutinizer Auto-Fixer2015-12-071-2/+0
| | | | This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com
* Merge pull request #20807 from ↵Thomas Müller2015-12-037-37/+178
|\ | | | | | | | | owncloud/dont-append-redirect-url-if-user-is-already-logged-in Don't append redirect URL if user is logged-in
| * Show error templateLukas Reschke2015-11-307-37/+178
| | | | | | | | Otherwise this leads to an endless redirection in case of a CSRF exception. Also sets user expectation right.
* | Allow DI for OCP\Files\IMimeTypeDetectorJoas Schilling2015-12-011-0/+4
| |
* | Allow DI the system tag stuff without Application classJoas Schilling2015-11-301-0/+8
|/
* Merge pull request #20782 from mitar/better-httpsThomas Müller2015-11-271-1/+2
|\ | | | | Also allow empty value for no-HTTPS
| * Also allow empty value for no-HTTPS.Mitar2015-11-271-1/+2
| | | | | | | | This makes it work better with old version of Nginx.
* | Add full interface of server container as aliasMorris Jobke2015-11-261-0/+1
|/
* also match ie11 with Request::USER_AGENT_IERobin Appelman2015-11-221-1/+1
|
* Fix undefined HTTP_USER_AGENTThomas Müller2015-11-221-0/+3
|
* Move index.php from files to AppFrameworkLukas Reschke2015-11-161-0/+4
| | | | | 1. Allows it to use the more secure CSP rules of the AppFramework. 2. Adds some unit tests.
* Add escapeLikeParameter to IDBConnectionRobin Appelman2015-11-051-0/+9
|
* Use getHttpProtocol instead of $_SERVERLukas Reschke2015-10-302-5/+5
|
* Update license headersLukas Reschke2015-10-263-2/+3
|
* Remove dependency on ICrypto + use XORLukas Reschke2015-10-211-11/+4
|
* Provide IAppContainer as dependency injectionMorris Jobke2015-10-201-0/+4
|
* fix IE8 user agent detectionMorris Jobke2015-10-091-0/+1
|
* Merge pull request #19034 from owncloud/http-request-warningThomas Müller2015-10-081-1/+3
|\ | | | | Prevent warning decoding content
| * Prevent warning decoding contentRobin McCorkell2015-09-141-1/+3
| |
* | Merge pull request #19607 from owncloud/use-urlThomas Müller2015-10-082-4/+14
|\ \ | | | | | | Use `/` if installed in main folder
| * | Use `/` if installed in main folderLukas Reschke2015-10-062-4/+14
| | | | | | | | | | | | | | | | | | Otherwise an empty string is used indicating the cookie is only valid for those resources. This can lead to eunexpected behaviour. Fixes https://github.com/owncloud/core/issues/19196
* | | Add \OCP\IRequest::getHttpProtocolLukas Reschke2015-10-061-0/+21
|/ / | | | | | | | | | | Only allow valid HTTP protocols. Ref https://github.com/owncloud/core/pull/19537#discussion_r41252333 + https://github.com/owncloud/security-tracker/issues/119
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-26 05:30:56 +0000