summaryrefslogtreecommitdiffstats
path: root/lib/private
Commit message (Collapse)AuthorAgeFilesLines
* Fixed layout of bruteforcesettingsMorris Jobke2017-04-021-1/+1
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Respect bruteforce settings in the ThrottlerRoeland Jago Douma2017-04-021-0/+65
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Adds security section to the admin pageRoeland Jago Douma2017-04-021-0/+1
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Merge pull request #4140 from nextcloud/no_encryption_no_wrapperBjörn Schießle2017-03-311-2/+5
|\ | | | | Don't add the Encryption Storage Wrapper if there are no encryption modules
| * Don't add the Encryption Storage Wrapper if there are no encryption modulesRoeland Jago Douma2017-03-291-2/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | fixes #4125 If there is no encryption module enabled it makes no sense to setup the encryption wrapper (because we can't do anything anyway). This saves reading the header of files. Especialy on external storage/objectstore this should improve performance Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Merge pull request #3832 from nextcloud/fix_1303Roeland Jago Douma2017-03-301-0/+4
|\ \ | | | | | | Do not clear CSRF token on logout (fix for #1303)
| * | Do not clear CSRF token on logout (fix for #1303)Roeland Jago Douma2017-03-131-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a hacky way to allow the use case of #1303. What happens is 1. User tries to login 2. PreLoginHook kicks in and figures out that the user need to change their LDAP password or whatever => redirects user 3. While loading the redirect some logic of ours kicks in and logouts the user (thus clearing the session). 4. We render the new page but now the session and the page disagree about the CSRF token This is kind of hacky but I don't think it introduces new attack vectors. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | | Merge pull request #4150 from nextcloud/capped-memcache-pushJoas Schilling2017-03-302-2/+7
|\ \ \ | | | | | | | | support pushing to CappedMemoryCache
| * | | user ids are stringsRobin Appelman2017-03-301-1/+2
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
| * | | support pushing to CappedMemoryCacheRobin Appelman2017-03-301-1/+5
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | | rename fun to funcRobin Appelman2017-03-302-2/+2
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | | Add tests for query builder (i)likeRobin Appelman2017-03-301-1/+1
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | | dont double escapeRobin Appelman2017-03-302-2/+0
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | | fix licence headersRobin Appelman2017-03-305-40/+45
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | | Move all children of a folder in a single queryRobin Appelman2017-03-301-18/+27
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | | Add function builder to the query builderRobin Appelman2017-03-305-0/+172
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | | add support for escaping like parameters when using the query builderRobin Appelman2017-03-303-0/+50
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | | Add MD5() to sqliteRobin Appelman2017-03-301-0/+3
|/ / / | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | Merge pull request #4132 from nextcloud/fix-safari-gzipLukas Reschke2017-03-302-4/+4
|\ \ \ | | | | | | | | Fix gzip files for Safari
| * | | Fix gzip files for SafariMorris Jobke2017-03-292-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * Safari support gzip only if the filename does not end on .gz - so this renames them to .gzip Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | | | also rename defaultMailHeaderColor to defaultColorPrimaryJan-Christoph Borchardt2017-03-291-4/+4
| | | | | | | | | | | | | | | | Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
* | | | Add fallback to getMailHeaderColor so we don't break existing themesJulius Härtl2017-03-291-2/+5
| | | | | | | | | | | | | | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* | | | rename confusing getMailHeaderColor to getColorPrimary, ref #3491Jan-Christoph Borchardt2017-03-291-3/+3
| |_|/ |/| | | | | | | | Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
* | | Merge pull request #4116 from nextcloud/swift-cache-tokenRoeland Jago Douma2017-03-291-10/+62
|\ \ \ | | | | | | | | Cache swift authentication token in memcache
| * | | serialize the token to json instead of using php's serializeRobin Appelman2017-03-281-10/+36
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
| * | | cache swift tokens in memcacheRobin Appelman2017-03-281-10/+36
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | | Merge pull request #4129 from nextcloud/remove-verbose-error-messageJoas Schilling2017-03-291-2/+3
|\ \ \ \ | |_|/ / |/| | | Remove verbose error message
| * | | Remove verbose error messageLukas Reschke2017-03-291-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | There's no need to have this included in the error message. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* | | | Merge pull request #4120 from nextcloud/newest-item-first-in-activityMorris Jobke2017-03-281-4/+4
|\ \ \ \ | | | | | | | | | | Change the order on merging activities so the newest item is first
| * | | | Change the order on merging activities so the newest item is firstJoas Schilling2017-03-281-4/+4
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | | | Merge pull request #4127 from nextcloud/update-legacy-csp-policyMorris Jobke2017-03-281-1/+3
|\ \ \ \ \ | | | | | | | | | | | | Update legacy CSP policy
| * | | | | Update legacy CSP policyLukas Reschke2017-03-281-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Aligns it with the one enforced by the AppFramework Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* | | | | | Merge pull request #4070 from nextcloud/gzip_scss_jsMorris Jobke2017-03-282-1/+17
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | GZip generated CSS/JS files
| * | | | | Fix testsRoeland Jago Douma2017-03-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
| * | | | | Allow to gzip CSS/JS filesRoeland Jago Douma2017-03-282-1/+17
| | |_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since in production the SCSS files are compiled once and the javascript files are combined once we can just as well gzip them aggresively. This means that once they are requested and the browser supports gzip we can just serve the gzipped file saving precious bandwidth. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | | | | Merge pull request #4004 from nextcloud/backport-27172Roeland Jago Douma2017-03-281-0/+8
|\ \ \ \ \ | |/ / / / |/| | | | Remove SharedCache::getNumericStorageId to let CacheWrapper do it
| * | | | Remove SharedCache::getNumericStorageId to let CacheWrapper do itVincent Petry2017-03-231-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The CacheWrapper will properly forward the call to the wrapped cache. Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | | | | Merge pull request #4112 from nextcloud/swift-configRobin Appelman2017-03-281-5/+80
|\ \ \ \ \ | |_|_|/ / |/| | | | Better error messages for objectsack swift configuration
| * | | | better error messages for invalid regions, urltypes and service namesRobin Appelman2017-03-281-4/+63
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
| * | | | better error messages when swift authentication failsRobin Appelman2017-03-281-1/+17
| | |/ / | |/| | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | | Merge pull request #4084 from ↵Morris Jobke2017-03-271-5/+3
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | nextcloud/fix-log-spam-with-too-few-navigation-items Don't spam the log with "Undefined index showInHeader"
| * | | | Don't spam the log with "Undefined index showInHeader"Joas Schilling2017-03-271-5/+3
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | | | Merge pull request #4096 from nextcloud/touch-floorMorris Jobke2017-03-271-1/+1
|\ \ \ \ \ | | | | | | | | | | | | round the mtime in touch
| * | | | | round the mtime in touchRobin Appelman2017-03-271-1/+1
| | |/ / / | |/| | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | | | Merge pull request #4072 from nextcloud/move-x-frame-options-into-phpGeorg Ehrke2017-03-271-1/+1
|\ \ \ \ \ | |_|/ / / |/| | | | Move X-Frame-Options into PHP
| * | | | Move X-Frame-Options into PHPLukas Reschke2017-03-261-1/+1
| |/ / / | | | | | | | | | | | | | | | | | | | | The public calendar view should be embeddable and we can't do that if the .htaccess sets a global X-Frame-Options. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* | | | Allow to specify the idJoas Schilling2017-03-261-1/+2
| | | | | | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | | Make sure help is always after usersJoas Schilling2017-03-261-1/+1
| | | | | | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | | Fix order as @jancborchardt requestedMorris Jobke2017-03-261-2/+2
| | | | | | | | | | | | | | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | | | Don't use the dropdown for one item onlyJoas Schilling2017-03-261-2/+12
| | | | | | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>