aboutsummaryrefslogtreecommitdiffstats
path: root/lib
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #14414 from owncloud/add-ini-helperThomas Müller2015-02-221-1/+27
|\ | | | | Add helper to check for `ini` values in `OC_Util::checkServer`
| * Add helper to check for `ini` values in `OC_Util::checkServer`Lukas Reschke2015-02-211-1/+27
| | | | | | | | | | | | | | | | | | This allows to check for specific values in the PHP.ini that ownCloud requires for full compatibility. `mbstring.func_overload`: https://github.com/owncloud/core/issues/14372 `output_buffering`: http://doc.owncloud.org/server/8.0/admin_manual/configuration/big_file_upload_configuration.html#configuring-php Fixes https://github.com/owncloud/core/issues/14372 and https://github.com/owncloud/core/issues/14412
* | [tx-robot] updated from transifexJenkins for ownCloud2015-02-222-2/+2
|/
* Merge pull request #13777 from owncloud/close-cursorLukas Reschke2015-02-202-21/+29
|\ | | | | Close cursor for appframework and manipulation queries if applicable
| * ignore cursorclosingBernhard Posselt2015-01-292-21/+29
| |
* | Merge pull request #13767 from owncloud/issue/13764-mimetype-raceconditionThomas Müller2015-02-201-3/+7
|\ \ | | | | | | Use insertIfNotExists() and reload mimetypes after inserting one
| * | Use insertIfNotExists() and reload mimetypes after inserting oneJoas Schilling2015-02-021-3/+7
| | |
* | | Merge pull request #14359 from owncloud/add-satisfy-allLukas Reschke2015-02-201-0/+1
|\ \ \ | | | | | | | | Add `Satisfy All`
| * | | Add `Satisfy All`Lukas Reschke2015-02-191-0/+1
| | | | | | | | | | | | | | | | Fixes https://github.com/owncloud/core/issues/14356
* | | | [tx-robot] updated from transifexJenkins for ownCloud2015-02-202-4/+6
| | | |
* | | | Merge pull request #14366 from owncloud/remove-old-l10n-filesLukas Reschke2015-02-191-8/+0
|\ \ \ \ | | | | | | | | | | Remove some old l10n files they arent loaded anymore
| * | | | Remove some old l10n files they arent loaded anymoreJoas Schilling2015-02-191-8/+0
| | | | |
* | | | | Merge pull request #14199 from owncloud/cast-type-manuallyMorris Jobke2015-02-191-3/+3
|\ \ \ \ \ | | | | | | | | | | | | Manually type-cast all AJAX files
| * | | | | Manually type-case all AJAX filesLukas Reschke2015-02-131-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This enforces proper types on POST and GET arguments where I considered it sensible. I didn't update some as I don't know what kind of values they would support :see_no_evil: Fixes https://github.com/owncloud/core/issues/14196 for core
* | | | | | Port of #14041 to masterArthur Schiwon2015-02-191-3/+37
| |/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | on ownCloud upgrade: upgrade all apps in order, load important ones Fix "other" app update stack
* | | | | Merge pull request #14342 from owncloud/disallow-path-traversals-in-file-viewThomas Müller2015-02-191-6/+132
|\ \ \ \ \ | | | | | | | | | | | | Disallow path traversals in file view
| * | | | | Add some basic PHPDoc to functionsLukas Reschke2015-02-181-6/+124
| | | | | |
| * | | | | Prevent directory traversals in ctr of \OC\Files\ViewLukas Reschke2015-02-181-0/+8
| | |/ / / | |/| | | | | | | | | | | | | This prevents a misusage of \OC\Files\View by calling it with user-supplied input. In such cases an exception is now thrown.
* | | | | [tx-robot] updated from transifexJenkins for ownCloud2015-02-192-12/+12
| | | | |
* | | | | Merge pull request #13836 from owncloud/part-no-cache-updateThomas Müller2015-02-192-1/+13
|\ \ \ \ \ | |/ / / / |/| | | | Dont update the cache when working with part files
| * | | | Dont bother updating the cache when working with part filesRobin Appelman2015-02-051-0/+12
| | | | |
| * | | | Dont update the cache after fopenRobin Appelman2015-02-051-1/+1
| | | | |
* | | | | Merge pull request #13989 from owncloud/enhancment/security/11857Clark Tomlinson2015-02-183-7/+279
|\ \ \ \ \ | | | | | | | | | | | | Allow AppFramework applications to specify a custom CSP header
| * | | | | Rename to allowEvalLukas Reschke2015-02-161-1/+1
| | | | | |
| * | | | | Allow AppFramework applications to specify a custom CSP headerLukas Reschke2015-02-163-7/+279
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change allows AppFramework applications to specify a custom CSP header for example when the default policy is too strict. Furthermore this allows us to partially migrate away from CSS and allowed eval() in our JavaScript components. Legacy ownCloud components will still use the previous policy. Application developers can use this as following in their controllers: ```php $response = new TemplateResponse('activity', 'list', []); $cspHelper = new ContentSecurityPolicyHelper(); $cspHelper->addAllowedScriptDomain('www.owncloud.org'); $response->addHeader('Content-Security-Policy', $cspHelper->getPolicy()); return $response; ``` Fixes https://github.com/owncloud/core/issues/11857 which is a pre-requisite for https://github.com/owncloud/core/issues/13458 and https://github.com/owncloud/core/issues/11925
* | | | | | Merge pull request #14335 from owncloud/enable-strict-mode-per-deafultClark Tomlinson2015-02-181-2/+2
|\ \ \ \ \ \ | | | | | | | | | | | | | | Fix invalid `ini_set` directives
| * | | | | | Fix invalid `ini_set` directivesLukas Reschke2015-02-181-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Somehow they got messed up. Because PHP does automatic type juggling this has worked before as well however it's not guaranteed that this might work in the future as well.
* | | | | | | Merge pull request #14330 from ↵Lukas Reschke2015-02-183-21/+7
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | owncloud/revert-13879-add_debug_log_for_memcache_instantiation Revert "add debug log for memcache instantiation"
| * | | | | | | Revert "add debug log for memcache instantiation"Lukas Reschke2015-02-183-21/+7
| |/ / / / / /
* | | | | | | Use the untrusted domain in the installerLukas Reschke2015-02-181-2/+2
| | | | | | |
* | | | | | | Check if instance is not yet installedLukas Reschke2015-02-181-0/+1
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Due to a security hardening in 8.1 a missing value of empty trusted domains in the config would provoke an error as this was misused by a lot of users. This caused a problem where the initial installation happened from another domain than 127.0.0.1 as in this case the domain was considered untrusted as no value was defined. However, this special case should not get intercepted. To test: - [ ] Installing ownCloud on 127.0.0.1 works - [ ] Installing ownCloud on another domain / IP works - [ ] When setting up ownCloud from 127.0.0.1 and accessing it from the domain above the trusted domain error should be shown if not specified in the config Fixes https://github.com/owncloud/core/issues/14320
* | | | | | Merge pull request #14308 from owncloud/fix-14247Thomas Müller2015-02-181-0/+1
|\ \ \ \ \ \ | | | | | | | | | | | | | | Add mapping for a broken varchar type.
| * | | | | | Add mapping for a broken varchar type. Fixes #14247Victor Dubiniuk2015-02-171-0/+1
| | | | | | |
* | | | | | | Merge pull request #14273 from owncloud/require-at-least-apcu-4-0-6Lukas Reschke2015-02-181-0/+2
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | Use APCu only if available in version 4.0.6 and higher
| * | | | | | | Use APCu only if available in version 4.0.6 and higherLukas Reschke2015-02-171-0/+2
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | APCu before 4.0.6 is unbelievable buggy and tend to segfault the PHP process (i.e. the whole webserver) This potentially fixes https://github.com/owncloud/core/issues/14175 Requires a backport to stable8
* | | | | | | Merge pull request #14207 from owncloud/propfind-optimizeMorris Jobke2015-02-181-18/+27
|\ \ \ \ \ \ \ | |/ / / / / / |/| | | | | | Optimize quota calculation for propfind
| * | | | | | pass fileinfo to getStorageInfoRobin Appelman2015-02-131-2/+1
| | | | | | |
| * | | | | | Cache quota info for directoriesRobin Appelman2015-02-131-16/+26
| | | | | | |
* | | | | | | Merge pull request #14056 from owncloud/refactor/13976Lukas Reschke2015-02-1719-432/+576
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | Refactor OC_Request into TrustedDomainHelper and IRequest
| * | | | | | | Incorporate review changesLukas Reschke2015-02-163-9/+20
| | | | | | | |
| * | | | | | | Add blackmagic due to cyclic dependency :see_no_evil:Lukas Reschke2015-02-162-4/+11
| | | | | | | |
| * | | | | | | Make scrutinizer happyLukas Reschke2015-02-163-3/+3
| | | | | | | |
| * | | | | | | Refactor OC_Request into TrustedDomainHelper and IRequestLukas Reschke2015-02-1619-430/+556
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This changeset removes the static class `OC_Request` and moves the functions either into `IRequest` which is accessible via `\OC::$server::->getRequest()` or into a separated `TrustedDomainHelper` class for some helper methods which should not be publicly exposed. This changes only internal methods and nothing on the public API. Some public functions in `util.php` have been deprecated though in favour of the new non-static functions. Unfortunately some part of this code uses things like `__DIR__` and thus is not completely unit-testable. Where tests where possible they ahve been added though. Fixes https://github.com/owncloud/core/issues/13976 which was requested in https://github.com/owncloud/core/pull/13973#issuecomment-73492969
* | | | | | | | [tx-robot] updated from transifexJenkins for ownCloud2015-02-17158-214/+76
|/ / / / / / /
* | | | | | | Merge pull request #14263 from owncloud/missing-visibility-activity-iextensionThomas Müller2015-02-161-1/+1
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | Add visibility to interface to make scrutinizer 1 step happier
| * | | | | | | Add visibility to interface to make scrutinizer 1 step happierJoas Schilling2015-02-161-1/+1
| | | | | | | |
* | | | | | | | add debug log for memcache instantiationJörn Friedrich Dreyer2015-02-163-7/+21
|/ / / / / / /
* | | | | | | Merge pull request #14128 from owncloud/drop-unused-methodsMorris Jobke2015-02-161-27/+10
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | Remove unused function and correct PHPDoc
| * | | | | | | Remove unused function and correct PHPDocLukas Reschke2015-02-161-27/+10
| | | | | | | |
* | | | | | | | Merge pull request #13750 from owncloud/enhanced-code-checkerThomas Müller2015-02-163-51/+250
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | Implement php code checker to detect usage of not allowed private ...