summaryrefslogtreecommitdiffstats
path: root/lib
Commit message (Collapse)AuthorAgeFilesLines
* [tx-robot] updated from transifexNextcloud bot2022-08-0558-56/+58
| | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* Merge pull request #33443 from nextcloud/backport/33407/stable23blizzz2022-08-041-3/+6
|\ | | | | [stable23] Handle one time and large passwords
| * Handle one time and large passwordsCarl Schwan2022-08-031-3/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For passwords bigger than 250 characters, use a bigger key since the performance impact is minor (around one second to encrypt the password). For passwords bigger than 470 characters, give up earlier and throw exeception recommanding admin to either enable the previously enabled configuration or use smaller passwords. This adds an option to disable storing passwords in the database. This might be desirable when using single use token as passwords or very large passwords. Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* | Merge pull request #33354 from nextcloud/backport/33031/stable23blizzz2022-08-036-3/+207
|\ \ | |/ |/| [stable23] Improve local IP detection
| * Fix autoloaderCôme Chilliet2022-08-014-1/+8
| | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * Remove call to undefined function, fix typingCôme Chilliet2022-08-011-22/+11
| | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * Align copied file with our code styleCôme Chilliet2022-08-011-184/+178
| | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * Copy IpUtils from Symfony to avoid new dependency on backportCôme Chilliet2022-08-012-0/+203
| | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * Use Symfony IpUtils to check for local IP rangesCôme Chilliet2022-07-261-3/+6
| | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * Check for local IPs nested in IPv6 as wellCôme Chilliet2022-07-261-1/+3
| | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * Refactor local IP if and set strict to true for in_arrayCôme Chilliet2022-07-261-6/+6
| | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * Improve local IP detectionCôme Chilliet2022-07-261-0/+6
| | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* | Merge pull request #33156 from nextcloud/backport/32997/stable23blizzz2022-08-014-14/+26
|\ \ | | | | | | [stable23] load dashboard widgets of enabled apps only
| * | fix PHP 7.3 compatArthur Schiwon2022-08-011-2/+5
| | | | | | | | | | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
| * | avoid early DI of IAppManagerArthur Schiwon2022-07-271-4/+7
| | | | | | | | | | | | | | | | | | - might break install Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
| * | load widgets only of enabled appsArthur Schiwon2022-07-274-14/+20
| |/ | | | | | | | | | | | | | | | | | | | | | | | | - per design, all enabled apps have their registration run - limitations, e.g. enabled by group, are not considered in that state, because we do not have a session (and might need apps?) - before instantiation of widget it has to be checked whether the providing app is actually enabled for the logged in user. - a public interface is being changed, but it is not meant to be implemented or used outside of the core handling. Therefore save to backport. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* / don't set `null` as a bundle pathRobin Appelman2022-07-271-3/+6
|/ | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* Merge pull request #33344 from nextcloud/backport/33129/stable23Joas Schilling2022-07-261-0/+3
|\ | | | | [stable23] Fix reading blob data as resource
| * Fix reading blob data as resourceThomas Citharel2022-07-251-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PostgreSQL returns data as resource when using IQueryBuilder::PARAM_LOB (which is used for QBMapper). Previously we just converted this resource using settype, which produced things like "Resource id #14" instead of the actual resource data. Now we read the stream correctly if the returned data is a resource See context at #22472 Fixes #22439 Signed-off-by: Thomas Citharel <tcit@tcit.fr>
* | [tx-robot] updated from transifexNextcloud bot2022-07-262-2/+12
|/ | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* Merge pull request #33253 from nextcloud/backport/32963/stable23blizzz2022-07-222-12/+24
|\ | | | | [stable23] also use nextcloud certificate bundle when downloading from s3
| * only use nextcloud bundle when explicitly enabledRobin Appelman2022-07-182-10/+15
| | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
| * also use nextcloud certificate bundle when downloading from s3Robin Appelman2022-07-182-10/+17
| | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | fix loading legacy app.php with multi app dirArthur Schiwon2022-07-191-1/+1
|/ | | | | | | | | | - requireAppFile() only appends /appinfo/app.php - without the absolute path, require_once looks into include_path - the first match in inlcude_path however migth be different from appPath - fixed by providing the tested(!), full path to the app Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* [tx-robot] updated from transifexNextcloud bot2022-07-142-0/+2
| | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* Merge pull request #33158 from nextcloud/backport/33153/stable23John Molakvoæ2022-07-081-4/+4
|\
| * Only ignore attempts of the same actionJoas Schilling2022-07-071-4/+4
| | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | [tx-robot] updated from transifexNextcloud bot2022-07-082-2/+6
| | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | Merge pull request #32987 from nextcloud/backport/stable23/31771blizzz2022-07-071-13/+22
|\ \ | |/ |/| [stable23] Fix hook encryption with cron job
| * Fix hook encryption with cron jobCarl Schwan2022-07-061-13/+22
| | | | | | | | | | | | | | | | Make sure the setup fs is set before using the Update service Backport of #29674 Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* | Merge pull request #33114 from nextcloud/backport/stable23/31194Carl Schwan2022-07-074-8/+25
|\ \ | | | | | | [stable23] Allow to disable password policy enforcement for selected groups
| * | Allow to disable password policy enforcement for selected groupsCarl Schwan2022-07-054-8/+25
| | | | | | | | | | | | | | | | | | Signed-off-by: Carl Schwan <carl@carlschwan.eu> Co-authored-by: Vincent Petry <vincent@nextcloud.com> Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
* | | Do not save invalid display name to the databaseChristopher Ng2022-07-061-0/+4
| | | | | | | | | | | | Signed-off-by: Christopher Ng <chrng8@gmail.com>
* | | [tx-robot] updated from transifexNextcloud bot2022-07-062-2/+2
| | | | | | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | Merge pull request #33024 from nextcloud/backport/29862/stable23Carl Schwan2022-07-052-6/+14
|\ \ \ | |/ / |/| | [stable23] Avoid deprecation warnings about libxml_disable_entity_loader in PHP 8+
| * | Avoid deprecation warnings about libxml_disable_entity_loader in PHP 8.1Côme Chilliet2022-06-282-6/+14
| | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* | | [tx-robot] updated from transifexNextcloud bot2022-07-042-0/+4
| | | | | | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | Check whether entry is of type ICacheEntry in Cache->remove()Jonas2022-06-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In some scenarios (file not in cache, but partial data of it in the object), Cache->get() might return an array, which leads to errors like "Call to a member function getId() on array". So check whether the returned entry is of type ICacheEntry before doing operations on it in Cache->remove(). Fixes: #33023 Signed-off-by: Jonas <jonas@freesources.org>
* | | Merge pull request #33070 from nextcloud/backport/33065/stable23Carl Schwan2022-06-301-4/+2
|\ \ \ | | | | | | | | [stable23] Fix detection of firefox in ContentSecurityPolicyNonceManager
| * | | Fix detection of firefox in ContentSecurityPolicyNonceManagerCarl Schwan2022-06-301-4/+2
| |/ / | | | | | | | | | | | | | | | | | | | | | Reuse Request::USER_AGENT_FIREFOX, and also update the safari detection since safari < 12 is not supported anymore and we can remove a bit of code duplication Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* / / [tx-robot] updated from transifexNextcloud bot2022-06-302-2/+2
|/ / | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | Rename setting name to reduce its lengthLouis Chemineau2022-06-282-2/+2
| | | | | | | | Signed-off-by: Louis Chemineau <louis@chmn.me>
* | [tx-robot] updated from transifexNextcloud bot2022-06-282-0/+2
| | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | Merge pull request #32991 from nextcloud/backport/32988/stable23blizzz2022-06-241-2/+4
|\ \ | | | | | | [stable23] Improve local domain detection
| * | Improve local domain detectionCôme Chilliet2022-06-231-2/+4
| |/ | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* | Merge pull request #32322 from nextcloud/backport/stable22/share_search_tweaksLouis2022-06-234-2/+43
|\ \ | |/ |/| [stable23] Add share search tweaks
| * Use email settings in DAV searchLouis Chemineau2022-06-072-1/+13
| | | | | | | | Signed-off-by: Louis Chemineau <louis@chmn.me>
| * Use share setting in DAV searchLouis Chemineau2022-06-072-0/+12
| | | | | | | | | | | | shareapi_restrict_user_enumeration_full_match_ignore_second_display_name was introduced to ignore second display name during search from the share panel. But this setting was not respected by search from the calendar application. This fix it. Signed-off-by: Louis Chemineau <louis@chmn.me>
| * Add setting to ignore email during searchLouis Chemineau2022-06-072-1/+11
| | | | | | | | Signed-off-by: Louis Chemineau <louis@chmn.me>
| * Add settings to ignore second display name in searchLouis Chemineau2022-06-071-0/+4
| | | | | | | | Signed-off-by: Louis Chemineau <louis@chmn.me>