summaryrefslogtreecommitdiffstats
path: root/lib
Commit message (Collapse)AuthorAgeFilesLines
* Some more brandingLukas Reschke2016-06-2098-410/+410
|
* fixed codeMorris Jobke2016-06-202-8/+8
|
* Capped cache for user configJörn Friedrich Dreyer2016-06-201-2/+4
|
* Do not recurse link share fetchingRoeland Jago Douma2016-06-201-0/+5
| | | | * Might fix an issue on oracle
* Capped cache for cache info in UserMountCacheVincent Petry2016-06-201-3/+14
|
* Use capped cache for encryption's user access listVincent Petry2016-06-201-0/+3
|
* Soften the cookie check if no cookies are sentLukas Reschke2016-06-152-9/+20
| | | | | | | | | | | | When no cookies are sent it is not required to perform any check for the strict or lax cookie, it does not provide any significant security advantage. It does however interfer with the Android client which requests thumbnails from the unofficial API at `/index.php/apps/files/api/v1/thumbnail/256/256/{filename}`. This endpoint expects the strict cookie to be existent to not leak the existence of files. The Android client authenticates against this endpoint using Basic Auth and without cookies in some cases at least. This will make these endpoints work again with such cases. To test this issue the following cURL command once without the patch and once with: > curl http://localhost/index.php/apps/files/api/v1/thumbnail/256/256/welcome.txt -u admin -v Without the patch the request is redirected (which the client does not obey) and with the patch the preview is returned.
* Merge branch 'stable9' of https://github.com/owncloud/core into ↵Arthur Schiwon2016-06-132-0/+110
|\ | | | | | | downstream-160613
| * Repair job to fix permissions for avatars (#25068)Roeland Douma2016-06-132-0/+110
| | | | | | | | | | | | | | | | | | | | Backport of #24898 Cherry-picked: 1b66db72d916a763b1c22613b9df5c42e93593a8 60225284f3b8ef947f67bbe168b12dca867d6f3d 28d9ad2817b744bcef35a9259f65eb56b0b2ae78 But manually since we renamed stuff and the repair procedures changed
* | Add more brandingLukas Reschke2016-06-131-1/+1
| | | | | | | | | | - Shows "Nextcloud will be updated" in the updater screen - Shows "Nextcloud" if you add a bookmark on iOS instead of "ownCloud"
* | Merge pull request #54 from nextcloud/backport-upload-only-sharesLukas Reschke2016-06-131-2/+3
|\ \ | | | | | | [stable9] Backport files drop feature
| * | [stable9] Backport files drop featureLukas Reschke2016-06-111-2/+3
| | |
* | | Add ownCloud root CALukas Reschke2016-06-131-2/+9
| | | | | | | | | | | | As the apps from the appstore are at the moment signed by the ownCloud Root CA we have to add it as fallback as well. We can remove that once Nextcloud 10 with new appstore has been released.
* | | [stable9] Use custom updater URLLukas Reschke2016-06-121-1/+1
| | |
* | | Link to Nextcloud Android clientLukas Reschke2016-06-121-1/+1
| | |
* | | Link to Nextcloud docsLukas Reschke2016-06-121-2/+2
| | |
* | | Revert "Remove "Help" link from personal sidebar"Lukas Reschke2016-06-121-4/+2
|/ / | | | | | | This reverts commit 34ad3f7ada1363b887b58f171ba1fd5ba71a3447.
* | Merge pull request #37 from nextcloud/downstream-stable9-160610Lukas Reschke2016-06-114-14/+95
|\ \ | | | | | | Downstream stable9 16-06-10
| * | Merge branch 'stable9' of https://github.com/owncloud/core into ↵Arthur Schiwon2016-06-104-14/+95
| |\| | | | | | | | | | downstream-stable9-160610
| | * Merge pull request #25045 from owncloud/stable9-admin-datadircheck-fixVincent Petry2016-06-091-13/+24
| | |\ | | | | | | | | [stable9] Use temporary htaccesstest.txt for data dir security check
| | | * Use temporary htaccesstest.txt for data dir security checkVincent Petry2016-06-091-13/+24
| | | |
| | * | skip scanning for a user when the user is not setup yetRobin Appelman2016-06-091-1/+6
| | |/
| | * Fix update from 9.0.0 and 9.0.1 (#24854)VicDeo2016-06-072-0/+65
| | |
* | | Merge pull request #44 from nextcloud/stable9-add-same-site-cookiesLukas Reschke2016-06-118-0/+176
|\ \ \ | | | | | | | | [stable9] Add Same Site Cookie protection
| * | | Add Same Site Cookie protectionLukas Reschke2016-06-108-0/+176
| |/ /
* / / backport design changeJan-Christoph Borchardt2016-06-101-7/+7
|/ /
* | Print error message again, when 3rdparty submodule is not initializedArthur Schiwon2016-06-081-1/+3
| | | | | | | | | | - old code used Response which attempted to use OC::$server which is not and cannot be intialised at this part of the code.
* | Remove "Help" link from personal sidebarLukas Reschke2016-06-061-2/+4
|/ | | | | | At the moment we want to hide the help link from the personal sidebar as it contains the original ownCloud documentation. Once we have our own documentation with our proper branding and so on we can reenable this.
* Allow public upload when the quota is unlimited (#24988)Joas Schilling2016-06-061-1/+1
|
* Merge pull request #24921 from owncloud/stable9-backport-24795Vincent Petry2016-06-021-1/+2
|\ | | | | [9.0] Allow opening the password reset link in a new window when …
| * Allow opening the password reset link in a new window when its a URLJoas Schilling2016-06-011-1/+2
| |
* | Merge pull request #24944 from owncloud/fix_21173_stable9Vincent Petry2016-06-021-0/+1
|\ \ | | | | | | stable9: normalize path in getInternalPath
| * | normalize path in getInternalPathGeorg Ehrke2016-06-011-0/+1
| |/
* | Backport of share id as string fixVincent Petry2016-06-011-1/+1
| |
* | trigger size calculation after scanningRobin Appelman2016-06-011-0/+6
|/
* [stable9] Properly check for mbstring extensionLukas Reschke2016-05-311-1/+1
| | | | mb_detect_encoding is in the fallback we ship in the polyfill library, mb_strcut is not. Thus this lead to a false positive and ownCloud would just break.
* Only show message in the UI when the checker is enabled (#24773)Joas Schilling2016-05-301-1/+1
|
* replaced UnseekableException => NotPermittedExceptionPiotr Filiciak2016-05-253-40/+5
|
* Lowercase class name for unseekableexceptionVincent Petry2016-05-251-0/+0
| | | | Because 9.1 was PSR-4 and the backport goes back to the old style
* Code style and doc fixPiotr Filiciak2016-05-253-10/+11
|
* Http Range requests support in downloadsPiotr Filiciak2016-05-253-12/+199
| | | | Http range requests support is required for video preview
* Merge pull request #24417 from owncloud/fix_24182_9.0Vincent Petry2016-05-241-1/+9
|\ | | | | [stable9] first call the post_login hooks, before we call getUserFolder.
| * first call the post_login hooks, before we call getUserFolder.Björn Schießle2016-05-031-1/+5
| | | | | | | | | | | | | | The login process needs to be completed before we can safely create the users home folder. For example we need to give encryption a chance to initialize the users encryption keys in order to copy the skeleton files correctly
| * Fixes #23899Thomas Müller2016-05-031-0/+4
| |
* | Make sure that installed is a booleanJoas Schilling2016-05-231-0/+1
| |
* | Remove the password from the validateUserPass() method as wellJoas Schilling2016-05-191-1/+1
| |
* | Merge pull request #24414 from owncloud/stable9_24405Vincent Petry2016-05-191-1/+11
|\ \ | | | | | | [Stable9] Use a CappedCache in the user database backend
| * | Use a CappedCache in the user database backendRoeland Jago Douma2016-05-031-1/+11
| |/ | | | | | | | | | | When running with a user database backend on large installations the cache can grow to significant sizes. This can be especially problematic when running big cron/repair jobs.
* | Merge pull request #24705 from owncloud/locking-mark-reload-free-9Vincent Petry2016-05-191-0/+3
|\ \ | | | | | | [9.0] free up memory when releasing the last shared lock
| * | free up memory when releasing the last shared lockRobin Appelman2016-05-181-0/+3
| | |