| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
|\ \
| | |
| | | |
[jenkins] do not load unnecessary code in case of webdav
|
| | |
| | |
| | | |
This will be in a new PR
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
changing from "protected static" to "protected"
as suggested by @nickvergessen
https://github.com/owncloud/core/pull/19114#discussion_r39719851
moving initTemplate() into template constr.
reduce to move initTemplate only
cleanup spaces
|
|/ /
| |
| |
| | |
if(\OC\Files\Filesystem::isIgnoredDir($file)). Eases to find where this operation is used.
|
|\ \
| | |
| | | |
Explicit upgrade version + prevent downgrades
|
| | | |
|
| | |
| | |
| | |
| | | |
Saves 50ms
|
|/ / |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
While BREACH requires the following three factors to be effectively exploitable we should add another mitigation:
1. Application must support HTTP compression
2. Response most reflect user-controlled input
3. Response should contain sensitive data
Especially part 2 is with ownCloud not really given since user-input is usually only echoed if a CSRF token has been passed.
To reduce the risk even further it is however sensible to encrypt the CSRF token with a shared secret. Since this will change on every request an attack such as BREACH is not feasible anymore against the CSRF token at least.
|
|\ \
| | |
| | | |
Store storage availability in database
|
| |/
| |
| |
| |
| |
| |
| |
| | |
Storage status is saved in the database. Failed storages are rechecked every
10 minutes, while working storages are rechecked every request.
Using the files_external app will recheck all external storages when the
settings page is viewed, or whenever an external storage is saved.
|
|/
|
|
|
|
| |
- less static calls
- use params on sql queries
- handle sql exception on database and user creation gracefully
|
|\
| |
| | |
Add getUserFolder to IRootFolder
|
| |
| |
| |
| |
| | |
* untangle DI of user specific folders
* allows to autodetect the dependency
|
| | |
|
| | |
|
|\ \
| |/
|/| |
Move away from private static function OC_Util::getUrlContent
|
| |
| |
| |
| | |
It is just a wrapper and the other functions are deprecated already
|
| | |
|
| | |
|
|\ \
| | |
| | | |
Allow change update channel via public API
|
| |/ |
|
|\ \
| | |
| | | |
wait with copying the skeleton untill login and setupfs are done
|
| |/ |
|
| |
| |
| |
| | |
* Changed "instead to" to "instead of".
* Changed "setup" to "set up" (past participle).
|
|/
|
|
|
|
|
|
|
| |
From https://github.com/owncloud/core/issues/16287:
> This is caused by XCache at https://github.com/owncloud/core/blob/8e59d4c64b48ed7daeebb714e11213f7a22b5740/lib/private/util.php#L1276 where we are trying to reset the opcode cache with `XC_TYPE_PHP`.
> I suspect that while XCache is installed its opcode component is not used. Unfortunately, the XCache API is not really properly documented and thus I don't know what API we would have to call to check whether the `XC_TYPE_PHP` cache is populated. In fact, there is an [open XCache bug](http://xcache.lighttpd.net/ticket/176) since 7 years that discusses this problem and is likely to never get fixed since XCache is abandonware.
Fixes https://github.com/owncloud/core/issues/16287
|
| |
|
|
|
|
| |
Fixes https://github.com/owncloud/core/issues/14670
|
|
|
|
| |
This is catched in index.php as older PHP versions will never execute the code path until there due to 5.4 syntax changes.
|
|
|
|
|
|
|
|
| |
This removes the hard-dependency on output buffering as requested at https://github.com/owncloud/core/issues/16013 since a lot of distributions such as Debian and Ubuntu decided to use `4096` instead of the PHP recommended and documented default value of `off`.
However, we still should encourage disabling this setting for improved performance and reliability thus the setting switches in `.user.ini` and `.htaccess` are remaining there. It is very likely that we in other cases also should disable the output buffering but aren't doing it everywhere and thus causing memory problems.
Fixes https://github.com/owncloud/core/issues/16013
|
|
|
|
| |
Will prevent users from use ownCloud on Windows Server :see_no_evil:
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
Also used the opportunity to refactor it into an AppFramework controller so that we can unit test it.
Fixes https://github.com/owncloud/core/issues/14956
|
| |
|
| |
|
| |
|
|\
| |
| | |
pass mountpoint to storage wrapper callback
|
| | |
|