| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
| |
|
|\
| |
| | |
Fix PHPDoc :see_no_evil:
|
| |
| |
| |
| | |
*sigh*
|
|/ |
|
| |
|
| |
|
|
|
|
| |
This reverts commit 6a1a4880f0d556fb090f19a5019fec31916f5c36.
|
| |
|
|\
| |
| | |
Better caching for enabled apps
|
| | |
|
|/ |
|
|
|
|
| |
Otherwise logout can fail if the requesttoken contains a +
|
|
|
|
|
|
|
|
|
|
| |
\Sabre\DAV\Auth\Backend\AbstractBasic::authenticate was only calling \OC_Connector_Sabre_Auth::validateUserPass when the response of \Sabre\HTTP\BasicAuth::getUserPass was not null.
However, there is a case where the value can be null and the user could be authenticated anyways: The authentication via ownCloud web-interface and then accessing WebDAV resources. This was not possible anymore with this patch because it never reached the code path in this scenario.
This patchs allows authenticating with a session without isDavAuthenticated value stored (this is for ugly WebDAV clients that send the cookie in any case) and thus the functionality should work again.
To test this go to the admin settings and test if the WebDAV check works fine. Furthermore all the usual stuff (WebDAV / Shibboleth / etc...) needs testing as well.
|
|\
| |
| | |
Add ultra-slim hack for incognito mode
|
| |
| |
| |
| | |
As discussed at https://github.com/owncloud/core/pull/12912#issuecomment-67391155
|
|\ \
| | |
| | | |
Move the Null-Byte LDAP check to the user manager
|
| |/
| |
| |
| |
| |
| | |
The existing method is deprecated and just a wrapper around the manager method. Since in the future other code paths might call this function instead we need to perform that check here.
Related to http://owncloud.org/security/advisory/?id=oc-sa-2014-020
|
|/
|
|
|
|
|
|
|
|
|
|
| |
Potentially fixes https://github.com/owncloud/core/issues/12915 and opens the door for potential other bugs...
Please test very carefully, this includes:
- Testing from OCS via cURL (as in #12915)
- Testing from OCS via browser (Open the "Von Dir geteilt" shares overview)
- WebDAV
- CalDAV
- CardDAV
|
|
|
|
|
|
|
|
| |
This adds a "backend" type filter to the index REST route which is a pre-requisite for https://github.com/owncloud/core/issues/12620
For example when calling `index.php/settings/users/users?offset=0&limit=10&gid=&pattern=&backend=OC_User_Database` only users within the backend `OC_User_Database` would be shown. (requires sending a CSRF token as well)
Depends upon https://github.com/owncloud/core/pull/12711
|
|
|
|
| |
First step of a somewhat testable user management. - I know, the JSON returns are in an ugly format but the JS expects it that way. So let's keep it that way until we have time to fix the JS in the future.
|
| |
|
|
|
|
| |
cache cleanup instead
|
| |
|
| |
|
|
|
|
| |
Ensures that Basic Auth works properly for APIs and removes the need for some even uglier lines of code.
|
|
|
|
|
| |
OC_Util::generateRandomBytes() only returns lowercase alphanumeric values.
We should use the new RNG which has a broader characterset.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
maintain deprecated \OC::$session when getting or setting the session via the server container or UserSession
restore order os OC::$session and OC::$CLI
remove unneded initialization of dummy session
write back session when $useCustomSession is true
log warning when deprecated app is used
|
| |
|
|\
| |
| | |
Issue/9972 Fix issues with group and username `0`
|
| |
| |
| |
| | |
Fix #9972
|
|\ \
| |/
|/| |
Add CSRF check on login and logout
|
| |\
| | |
| | |
| | |
| | | |
Conflicts:
core/templates/login.php
|
| | |
| | |
| | |
| | | |
This is a minor issue and not worth a backport in my opinion as it could break more things than it's worth having it.
|
| |/
|/| |
|
| |
| |
| |
| | |
* test case added to avoid adding them later
|
| | |
|
| | |
|
| | |
|
|/ |
|
| |
|
|\
| |
| |
| |
| |
| |
| | |
Conflicts:
apps/files/ajax/rawlist.php
cron.php
ocs/v1.php
|
| | |
|
| |\
| | |
| | | |
Security Update: session fixation
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This patch was automatically generated as part of the following inspection:
https://scrutinizer-ci.com/g/owncloud/core/inspections/cdfecc4e-a37e-4233-8025-f0d7252a8720
Enabled analysis tools:
- PHP Analyzer
- JSHint
- PHP Copy/Paste Detector
- PHP PDepend
|
| |\ \
| | | |
| | | |
| | | |
| | | | |
Conflicts:
lib/private/appconfig.php
|
| | | |
| | | |
| | | |
| | | | |
This reverts commit 5a5b6f187e719e6c0bac5e64c411eb74e6d28389.
|
| | | | |
|