| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
| |
We have to end the processing when a file is not found or otherwise the method is proceeding and even sending invalid file paths to the sendfile methods.
Due to nginx preventing directory traversals this is luckily not immediately exploitable. We should for hardening purposes however quit the script execution just as we do for 403 cases and others as well.
|
| |
|
| |
|
|\
| |
| | |
Add OC_Response::setContentLengthHeader() for Apache PHP SAPI workaround...
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Do not send Content-Length headers with a value larger than PHP_INT_MAX
(2147483647) on Apache PHP SAPI 32-bit. PHP will eat them and send 2147483647
instead.
When X-Sendfile is enabled, Apache will send a correct Content-Length header,
even for files larger than 2147483647 bytes. When X-Sendfile is not enabled,
ownCloud will not send a Content-Length header. This prevents progress bars
from working, but allows the actual transfer to work properly.
|
| | |
|
|\ \
| |/
|/| |
Updating .mailmap
|
| | |
|
| |
| |
| |
| | |
This reverts commit 6a1a4880f0d556fb090f19a5019fec31916f5c36.
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| | |
This reverts commit f2075f803fc59918cc20071cf174d6b5f81f5eed.
|
|/
|
|
| |
This reverts commit 31970ee7409ff2ed303b728ea4fd6f8d10302649.
|
| |
|
| |
|
| |
|
|
|
|
| |
It's only reasonable to have proper type hinting here which might even help us to catch bugs.
|
|
|
|
| |
Fixes https://github.com/owncloud/core/issues/11133
|
|
|
|
| |
Adds some hardening against potential CSP bypassed.
|
| |
|
| |
|
|\
| |
| | |
Send URI instead of filepath to NGINX for X-Accel
|
| | |
|
|\ \
| | |
| | | |
Fix setting the max-upload-size for really large values.
|
| |/
| |
| |
| | |
php can only parse filesize units up to gigabytes, not terabytes or petabytes.
|
| | |
|
|/
|
|
|
|
|
|
|
| |
Due to our CSP policy this link won’t work as it it considered as
inline Javascript.
This commit replaces the link with a static link to the files app.
Reimplementation of #8067 - fixes #7742
|
|
|
|
|
|
|
|
| |
When detecting whether the file to be downloaded is on external storage,
the correct path needs to be used.
It turns out that \OC\Files\View is needed to resolve the path correctly
relative to the user's home.
|
|\
| |
| |
| |
| |
| |
| | |
McNetic-zipstreamer
Conflicts:
lib/private/files.php
|
| | |
|
| |
| |
| |
| |
| |
| | |
cleaned up get() logic
fixed get() to only send headers if requested (xsendfile could get in the way)
do no longer readfile() when already using mod_xsendfile or similar
|
| | |
|
|\ \
| | |
| | | |
Do not send file list for select all on Download/delete
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
- When all files are selected, do not send the whole file list
- Download will trigger download for the parent folder, also works
with root
- Delete will send "allfiles" to the server that will find the file
list or the passed directory by itself
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This patch was automatically generated as part of the following inspection:
https://scrutinizer-ci.com/g/owncloud/core/inspections/cdfecc4e-a37e-4233-8025-f0d7252a8720
Enabled analysis tools:
- PHP Analyzer
- JSHint
- PHP Copy/Paste Detector
- PHP PDepend
|
|\| |
| | |
| | |
| | |
| | | |
Conflicts:
lib/private/appconfig.php
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Added isLocal() method to Storage to find out whether the storage is
local or not.
This method is used for the x-sendfile logic to find out whether to add
the headers.
|
|/ / |
|
|/ |
|
|
|
|
|
|
|
|
|
| |
Added new OC\Response API called setContentDispositionHeader() that
contains the needed workarounds for UTF8 and IE.
Refactored download code to use the new API.
Removed unused trashbin download file.
|
|
|
|
| |
The file on disk is encrypted, and not readable on client systems
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Until now, addSendfileHeader() was called even when no x-send-file
headers were set. Even though the method itself doesn't do anything,
a call to getLocalFile() was done and would trigger a full download
when using external storage.
Additionally, the storage resolution code is wrong and always
returns the local storage of the root filesystem, which caused the code to
be run anyway.
This commit fixes both issues.
|
|
|
|
|
|
|
| |
Added argument to getFileInfo() to disable adding the size of
mountpoints to a directory's size.
Fixes #5924
|
|
Conflicts:
lib/private/vcategories.php
|