| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
| |
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
|
| |
|
|\
| |
| | |
Rethrow the correct exception when there was an error in an app conta…
|
| |
| |
| |
| | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
|\ \
| | |
| | |
| | |
| | | |
lukanetconsult/hotfix/issue-6415-undefined-variable
Fix undefined variable $tmpRoot
|
| | |
| | |
| | |
| | |
| | |
| | | |
Refactoring of webroot detection left an unused variable.
Fixes: #6415
Signed-off-by: Axel Helmert <info@luka.de>
|
| | | |
|
| | |
| | |
| | |
| | | |
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Julius Härtl <jus@bitgrid.net>
|
|/ /
| |
| |
| | |
Signed-off-by: Julius Haertl <jus@bitgrid.net>
|
|\ \
| | |
| | | |
Add exceptions to PHPDoc of interface
|
| |/
| |
| |
| |
| |
| | |
Improves static code analysis here and also keeps expectations proper.
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
|
|/
|
|
| |
Signed-off-by: William Pain <pain.william@gmail.com>
|
| |
|
|\
| |
| | |
Use the language of the recipient for the share notification
|
| |
| |
| |
| | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
|\ \
| | |
| | | |
Ask the schema whether the table and column exist
|
| |/
| |
| |
| | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
|\ \
| |/
|/| |
Improve text: 'you have now' -> 'you now have'
|
| |
| |
| |
| | |
Signed-off-by: Leon Klingele <leon@struktur.de>
|
| | |
|
|\ \
| | |
| | | |
Fix failing csp/nonce check due to timed out session
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
The CSP nonce is based on the CSRF token. This token does not change,
unless you log in (or out). In case of the session data being lost,
e.g. because php gets rid of old sessions, a new CSRF token is gen-
erated. While this is fine in theory, it actually caused some annoying
problems where the browser restored a tab and Nextcloud js was blocked
due to an outdated nonce.
The main problem here is that, while processing the request, we write
out security headers relatively early. At that point the CSRF token
is known/generated and transformed into a CSP nonce. During this request,
however, we also log the user in because the session information was
lost. At that point we also refresh the CSRF token, which eventually
causes the browser to block any scripts as the nonce in the header
does not match the one which is used to include scripts.
This patch adds a flag to indicate whether the CSRF token should be
refreshed or not. It is assumed that refreshing is only necessary
if we want to re-generate the session id too. To my knowledge, this
case only happens on fresh logins, not when we recover from a deleted
session file.
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
|
|\ \ \
| |_|/
|/| | |
cleanup oci setup code
|
| | |
| | |
| | |
| | | |
Signed-off-by: Robin Appelman <robin@icewind.nl>
|
|\ \ \
| | | |
| | | | |
Don't log LDAP password when server is not available
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
The current implementation breaks installations with symlinks to
directories inside the webroot (i.E. apps).
With this change both variants, directory and symlinks, will be detected
correctly.
Fixes: #6028
Signed-off-by: Axel Helmert <axel.helmert@luka.de>
|
|\ \ \ \
| | | | |
| | | | | |
Allow group backend to declare users as admins
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Knut Ahlers <knut@ahlers.me>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Knut Ahlers <knut@ahlers.me>
|
|\ \ \ \ \
| |_|/ / /
|/| | | | |
Fix login with basic auth
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
| | | | | |
|
|\ \ \ \ \
| |/ / / /
|/| | | | |
Set the meta data before everything
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
This ensures that the meta data is set in the beginning
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| |_|/ /
|/| | |
| | | |
| | | | |
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
|
|\ \ \ \
| |_|_|/
|/| | | |
Allow configuring different command bus backends
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
|
| | | | |
|
| | | | |
|
|\ \ \ \
| | | | |
| | | | |
| | | | |
| | | | | |
nextcloud/fix-5219-absolute-path-must-be-relative-to-files-on-theming-update
Still throw a locked exception when the path is not relative to $user/files/
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Pass new value to triggerChange
|
| | |_|/ /
| |/| | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
it is not used. but pass in the empty string (on delete) and the new
file (on create)
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Generate system wide key pair (update repair step after backport)
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
|
| |/ / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
because we decided to backport it the repair step needs to be executed
already on stable12
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
|