Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | PDOException has no previous(), oh the consistency ... | Jörn Friedrich Dreyer | 2013-06-13 | 1 | -1/+1 |
| | |||||
* | introduce and use executeAudited in db.php | Jörn Friedrich Dreyer | 2013-06-10 | 1 | -0/+21 |
| | |||||
* | Use the new session wrapper | Robin Appelman | 2013-05-28 | 1 | -4/+4 |
| | |||||
* | Merge pull request #3111 from owncloud/csp-audio | icewind1991 | 2013-04-24 | 1 | -1/+2 |
|\ | | | | | Allow loading of external media ressources | ||||
| * | Allow loading of external media ressources | Lukas Reschke | 2013-04-24 | 1 | -1/+2 |
| | | |||||
* | | Merge pull request #3106 from IMM0rtalis/xframe_restriction_config | Lukas Reschke | 2013-04-24 | 1 | -1/+6 |
|\ \ | |/ |/| | - xframe restriction configurable now | ||||
| * | - xframe restriction configurable now | Florian Scholz | 2013-04-24 | 1 | -1/+6 |
| | | |||||
* | | check if there is a default/ folder in the theme directory if no theme exists | Bernhard Posselt | 2013-04-24 | 1 | -1/+1 |
|/ | |||||
* | Add warning about sanitization | Lukas Reschke | 2013-03-06 | 1 | -2/+3 |
| | |||||
* | Only send the standard headers | Lukas Reschke | 2013-03-04 | 1 | -1/+0 |
| | | | Fixes https://github.com/owncloud/apps/issues/675 | ||||
* | Merge master | Lukas Reschke | 2013-02-28 | 1 | -1/+1 |
|\ | |||||
| * | Sanitize HTML in html_select_options | Lukas Reschke | 2013-02-28 | 1 | -1/+1 |
| | | |||||
* | | [core] From echo to p | Lukas Reschke | 2013-02-27 | 1 | -3/+3 |
| | | |||||
* | | Remove the template autoescaping | Lukas Reschke | 2013-02-27 | 1 | -3/+1 |
|/ | | | | Ref #1963 | ||||
* | Merge pull request #1837 from owncloud/fix-user-template | Lukas Reschke | 2013-02-25 | 1 | -5/+0 |
|\ | | | | | Remove unneeded code for user layout template | ||||
| * | Remove unneeded code for user layout template | Bart Visscher | 2013-02-22 | 1 | -5/+0 |
| | | |||||
* | | Don't use routes when displaying error page | Bart Visscher | 2013-02-22 | 1 | -1/+3 |
|/ | |||||
* | Fix strict standard warning in user template | Robin Appelman | 2013-02-15 | 1 | -0/+2 |
| | |||||
* | Style-fix: Breakup long lines | Bart Visscher | 2013-02-14 | 1 | -4/+13 |
| | |||||
* | Also allow local files | Lukas Reschke | 2013-02-04 | 1 | -1/+1 |
| | |||||
* | Allow the loading of local font files embedded via data: | Lukas Reschke | 2013-02-04 | 1 | -1/+1 |
| | |||||
* | Allow loading of external fonts | Lukas Reschke | 2013-02-04 | 1 | -1/+1 |
| | | | | Required by several applications like our pdf viewer | ||||
* | Remove the CSP header for Firefox | Lukas Reschke | 2013-01-25 | 1 | -1/+0 |
| | | | | https://bugzilla.mozilla.org/show_bug.cgi?id=737064 *gnarf* | ||||
* | Allow the loading of external images | Lukas Reschke | 2013-01-25 | 1 | -1/+1 |
| | |||||
* | Notice about changing the standard policy | Lukas Reschke | 2013-01-23 | 1 | -0/+1 |
| | |||||
* | Allow admins to change the CSP policy in the config file | Lukas Reschke | 2013-01-23 | 1 | -1/+1 |
| | |||||
* | Allow eval() and send headers for legacy browsers | Lukas Reschke | 2013-01-22 | 1 | -2/+6 |
| | | | The blocking of eval() seems to have problems with JQuery 1.7.2 - let's allow it for now and disable it in the future. | ||||
* | Allow iframes to external domains | Lukas Reschke | 2013-01-22 | 1 | -2/+2 |
| | |||||
* | Correct copy paste fail | Lukas Reschke | 2013-01-21 | 1 | -1/+1 |
| | |||||
* | Disallow inline JS | Lukas Reschke | 2013-01-20 | 1 | -0/+1 |
| | |||||
* | Add the default-src | Lukas Reschke | 2013-01-20 | 1 | -2/+2 |
| | |||||
* | Add CSP header | Lukas Reschke | 2013-01-20 | 1 | -4/+5 |
| | |||||
* | Spaces to tabs | Bart Visscher | 2013-01-16 | 1 | -1/+1 |
| | |||||
* | handling proper display of files/folders with negative size | Thomas Mueller | 2013-01-14 | 1 | -5/+15 |
| | | | | refs #1162 | ||||
* | Fix a dirty function preventing showing errors | Brice Maron | 2012-12-03 | 1 | -14/+10 |
| | |||||
* | A new function to create nice error page. And use it for fatal db errors | Frank Karlitschek | 2012-11-24 | 1 | -0/+15 |
| | |||||
* | fix translation issues with previous commit | Alessandro Cosentino | 2012-11-13 | 1 | -3/+3 |
| | |||||
* | uncomment hours entries in relative date functions | Alessandro Cosentino | 2012-11-13 | 1 | -2/+2 |
| | |||||
* | Checkstyle: Fix the last 25 NoSpaceAfterComma | Felix Moeller | 2012-11-04 | 1 | -1/+1 |
| | |||||
* | Merge pull request #238 from fmms/checkstyle04 | Thomas Müller | 2012-11-04 | 1 | -6/+6 |
|\ | | | | | Checkstyle fixes | ||||
| * | Checkstyle fixes: NoSpaceAfterComma | Felix Moeller | 2012-11-04 | 1 | -4/+4 |
| | | |||||
| * | Checkstyle fixes for SpaceBeforeOpenBrace | Felix Moeller | 2012-11-04 | 1 | -2/+2 |
| | | |||||
* | | Merge pull request #178 from owncloud/JustOneCSRFTokenPerSession | Lukas Reschke | 2012-11-04 | 1 | -2/+0 |
|\ \ | |/ |/| | Just one CSRF token per session | ||||
| * | Create only one CSRF token per session | Lukas Reschke | 2012-10-31 | 1 | -2/+0 |
| | | | | | | | | | | | | | | | | | | Before, the CSRF token expired every hour. We had a script in place which should refresh the token but this don't worked in every case. (Laptop sleeping etc.) With this commit, the token will only get once created for every session so that the "Token expired" warning shouldn't appear. | ||||
* | | Checkstyle: many fixes | Felix Moeller | 2012-11-02 | 1 | -5/+5 |
|/ | |||||
* | added functions for printing escaped and unescaped values | Bernhard Posselt | 2012-10-28 | 1 | -0/+16 |
| | |||||
* | Correct a first issue Checkstyle is complaining about ... | Felix Moeller | 2012-10-22 | 1 | -2/+2 |
| | | | | This is BracketsNotRequired | ||||
* | Correct indentation | Lukas Reschke | 2012-10-10 | 1 | -3/+5 |
| | |||||
* | always generate access token, also for forms shown to anonymous users (e.g. ↵ | Björn Schießle | 2012-10-05 | 1 | -4/+2 |
| | | | | public shares) | ||||
* | Fix to preserve backward compatibility for apps creating static links ↵ | Christian Reiner | 2012-09-28 | 1 | -0/+8 |
| | | | | containing the request token (currently the contacts app and maybe some 3rd party implementations) |