summaryrefslogtreecommitdiffstats
path: root/lib
Commit message (Collapse)AuthorAgeFilesLines
...
* | Add share attributes + prevent download permissionVincent Petry2022-08-039-4/+308
| | | | | | | | | | | | Makes it possible to store download permission Signed-off-by: Vincent Petry <vincent@nextcloud.com>
* | Merge pull request #33439 from nextcloud/backport/32958/stable24blizzz2022-08-031-2/+2
|\ \ | | | | | | [stable24] Fix file public link permissions if public upload is not enabled
| * | don't reduce file public link permissions if public upload is not enabledJulien Veyssier2022-08-021-2/+2
| | | | | | | | | | | | Signed-off-by: Julien Veyssier <eneiluj@posteo.net>
* | | Merge pull request #33407 from nextcloud/backport/stable24/one-time-passwordVincent Petry2022-08-031-3/+6
|\ \ \ | |/ / |/| | [stable24] Handle one time and large passwords
| * | Handle one time and large passwordsCarl Schwan2022-07-291-3/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For passwords bigger than 250 characters, use a bigger key since the performance impact is minor (around one second to encrypt the password). For passwords bigger than 470 characters, give up earlier and throw exeception recommanding admin to either enable the previously enabled configuration or use smaller passwords. This adds an option to disable storing passwords in the database. This might be desirable when using single use token as passwords or very large passwords. Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* | | Merge pull request #33353 from nextcloud/backport/33031/stable24blizzz2022-08-024-2/+201
|\ \ \ | | | | | | | | [stable24] Improve local IP detection
| * | | Fix autoloaderCôme Chilliet2022-08-012-0/+2
| | | | | | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | | Remove call to undefined function, fix typingCôme Chilliet2022-08-011-22/+11
| | | | | | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | | Align copied file with our code styleCôme Chilliet2022-08-011-184/+178
| | | | | | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | | Copy IpUtils from Symfony to avoid new dependency on backportCôme Chilliet2022-08-012-1/+203
| | | | | | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | | Use Symfony IpUtils to check for local IP rangesCôme Chilliet2022-07-261-3/+7
| | | | | | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | | Check for local IPs nested in IPv6 as wellCôme Chilliet2022-07-261-1/+3
| | | | | | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | | Refactor local IP if and set strict to true for in_arrayCôme Chilliet2022-07-261-6/+6
| | | | | | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | | Improve local IP detectionCôme Chilliet2022-07-261-0/+6
| |/ / | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* / / don't set `null` as a bundle pathRobin Appelman2022-07-271-3/+6
|/ / | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | Merge pull request #33343 from nextcloud/backport/33129/stable24Joas Schilling2022-07-261-0/+3
|\ \ | | | | | | [stable24] Fix reading blob data as resource
| * | Fix reading blob data as resourceThomas Citharel2022-07-251-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PostgreSQL returns data as resource when using IQueryBuilder::PARAM_LOB (which is used for QBMapper). Previously we just converted this resource using settype, which produced things like "Resource id #14" instead of the actual resource data. Now we read the stream correctly if the returned data is a resource See context at #22472 Fixes #22439 Signed-off-by: Thomas Citharel <tcit@tcit.fr>
* | | [tx-robot] updated from transifexNextcloud bot2022-07-262-2/+12
|/ / | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | Merge pull request #33326 from nextcloud/backport/33308/stable24Vincent Petry2022-07-251-6/+15
|\ \ | | | | | | [stable24] always triger setup of builtin storage wrappers
| * | always triger setup of builtin storage wrappersRobin Appelman2022-07-221-6/+15
| | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | Merge pull request #33252 from nextcloud/backport/32963/stable24blizzz2022-07-222-12/+24
|\ \ \ | |/ / |/| | [stable24] also use nextcloud certificate bundle when downloading from s3
| * | only use nextcloud bundle when explicitly enabledRobin Appelman2022-07-182-10/+15
| | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
| * | also use nextcloud certificate bundle when downloading from s3Robin Appelman2022-07-182-10/+17
| | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | Merge pull request #33212 from nextcloud/backport/33211/stable24Jonas2022-07-191-4/+4
|\ \ \ | | | | | | | | [stable24] Fix listening for circle events in SetupManager
| * | | Fix listening for circle events in SetupManagerJonas2022-07-181-4/+4
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | So far, SetupManager listened for deprecated events that are no longer triggered. Instead, use the circle events that actually get triggered when adding or removing a circle or circle member. Also, these events get triggered on each instance of a globalscale setup. Fixes: #33210 Signed-off-by: Jonas <jonas@freesources.org>
* / / fix loading legacy app.php with multi app dirArthur Schiwon2022-07-191-1/+1
|/ / | | | | | | | | | | | | | | | | | | - requireAppFile() only appends /appinfo/app.php - without the absolute path, require_once looks into include_path - the first match in inlcude_path however migth be different from appPath - fixed by providing the tested(!), full path to the app Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | [tx-robot] updated from transifexNextcloud bot2022-07-142-0/+2
| | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | Merge pull request #33157 from nextcloud/backport/33153/stable24John Molakvoæ2022-07-081-4/+4
|\ \
| * | Only ignore attempts of the same actionJoas Schilling2022-07-071-4/+4
| | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | [tx-robot] updated from transifexNextcloud bot2022-07-082-2/+6
| | | | | | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | Merge pull request #32983 from nextcloud/backport/32242/stable24John Molakvoæ2022-07-072-14/+24
|\ \ \ | |/ / |/| |
| * | Fix logging data context to fileThomas Citharel2022-06-222-14/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It was only logged when an exception was provided or when using logData (which is not being much used). We make sure the interpolated parameters are not logged. Only tested with file write logger, but shouldn't work differently. Crash reporters always had the context. Signed-off-by: Thomas Citharel <tcit@tcit.fr>
* | | Merge pull request #32997 from nextcloud/backport/32980/stable24John Molakvoæ2022-07-074-15/+24
|\ \ \
| * | | avoid early DI of IAppManagerArthur Schiwon2022-06-281-4/+7
| | | | | | | | | | | | | | | | | | | | | | | | - might break install Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
| * | | load widgets only of enabled appsArthur Schiwon2022-06-234-14/+20
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - per design, all enabled apps have their registration run - limitations, e.g. enabled by group, are not considered in that state, because we do not have a session (and might need apps?) - before instantiation of widget it has to be checked whether the providing app is actually enabled for the logged in user. - a public interface is being changed, but it is not meant to be implemented or used outside of the core handling. Therefore save to backport. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | | Merge pull request #32986 from nextcloud/backport/stable24/31771John Molakvoæ2022-07-071-13/+25
|\ \ \
| * | | Fix hook encryption with cron jobCarl Schwan2022-06-221-13/+25
| |/ / | | | | | | | | | | | | | | | | | | | | | Make sure the setup fs is set before using the Update service Fix #29674 Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* | | Do not save invalid display name to the databaseChristopher Ng2022-07-061-0/+4
| | | | | | | | | | | | Signed-off-by: Christopher Ng <chrng8@gmail.com>
* | | Merge pull request #32483 from nextcloud/backport/32451/stable24Carl Schwan2022-07-061-1/+1
|\ \ \ | | | | | | | | [stable24] Fix cropped image generated when not asked
| * | | Fix cropped image generated when not askedCarl Schwan2022-07-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The $crop parameter was not propagated to the imaginary pipeline and instead it used the smartcrop algorithm always Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* | | | [tx-robot] updated from transifexNextcloud bot2022-07-062-2/+2
| | | | | | | | | | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | | [tx-robot] updated from transifexNextcloud bot2022-07-042-0/+4
| | | | | | | | | | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | | Merge pull request #33078 from nextcloud/backport/32924/stable24Carl Schwan2022-07-011-24/+6
|\ \ \ \ | | | | | | | | | | [stable24] Enable binary protocol again
| * | | | memcached should not throw arbitrary exceptionsArthur Schiwon2022-07-011-24/+6
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
| * | | | Enable binary protocol againCarl Schwan2022-07-011-1/+1
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* | | | | Check whether entry is of type ICacheEntry in Cache->remove()Jonas2022-06-301-1/+1
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In some scenarios (file not in cache, but partial data of it in the object), Cache->get() might return an array, which leads to errors like "Call to a member function getId() on array". So check whether the returned entry is of type ICacheEntry before doing operations on it in Cache->remove(). Fixes: #33023 Signed-off-by: Jonas <jonas@freesources.org>
* | | | Merge pull request #33069 from nextcloud/backport/33065/stable24Carl Schwan2022-06-301-4/+2
|\ \ \ \ | | | | | | | | | | [stable24] Fix detection of firefox in ContentSecurityPolicyNonceManager
| * | | | Fix detection of firefox in ContentSecurityPolicyNonceManagerCarl Schwan2022-06-301-4/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Reuse Request::USER_AGENT_FIREFOX, and also update the safari detection since safari < 12 is not supported anymore and we can remove a bit of code duplication Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* | | | | [tx-robot] updated from transifexNextcloud bot2022-06-302-2/+2
|/ / / / | | | | | | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | | Merge pull request #33049 from nextcloud/backport/32982/stable24Carl Schwan2022-06-281-1/+1
|\ \ \ \ | | | | | | | | | | [stable24] Fix metadata extraction