aboutsummaryrefslogtreecommitdiffstats
path: root/psalm.xml
Commit message (Collapse)AuthorAgeFilesLines
* chore(tests): Update psalm baselineFerdinand Thiessen2024-04-301-2/+3
| | | | | Co-authored-by: GitHub <noreply@github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* feat(CI): Add a stub for SensitiveParameter, so Psalm is not failing on ↵Joas Schilling2023-10-061-0/+1
| | | | | | Doctrine/DBAL Signed-off-by: Joas Schilling <coding@schilljs.com>
* ocm controllerMaxence Lange2023-09-201-1/+0
| | | Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
* new name of AppEcosystem is AppAPIAlexander Piskun2023-09-061-1/+1
| | | | Signed-off-by: Alexander Piskun <bigcat88@icloud.com>
* Fix psalm ci (stub). Wrap server container with try-catchAndrey Borysenko2023-08-021-0/+1
| | | | Signed-off-by: Andrey Borysenko <andrey18106x@gmail.com>
* psalm: Enable more/less specific errorsjld31032023-07-031-0/+4
| | | | Signed-off-by: jld3103 <jld3103yt@gmail.com>
* displayname on federated sharesMaxence Lange2023-06-281-0/+2
| | | Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
* Use psalm 5jld31032023-05-021-1/+1
| | | | Signed-off-by: jld3103 <jld3103yt@gmail.com>
* Merge pull request #37505 from nextcloud/fix/recommended-psalm-optionsJoas Schilling2023-04-031-0/+2
|\ | | | | Set recommended psalm options
| * Set recommended psalm optionsjld31032023-03-311-0/+2
| | | | | | | | Signed-off-by: jld3103 <jld3103yt@gmail.com>
* | Add stubs for Psr\Container to allow running psalm with multiple threadsjld31032023-03-311-0/+1
|/ | | | Signed-off-by: jld3103 <jld3103yt@gmail.com>
* chore(psalm): Make psalm aware of sabre/uriJulius Härtl2023-03-081-0/+1
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Remove accessibilityJohn Molakvoæ2022-04-211-1/+0
| | | | Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>
* Add stubs for ZipArchiveCôme Chilliet2022-04-121-0/+1
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* Fix a few psalm issues and moved back to psalm/phar 4.18Carl Schwan2022-01-121-7/+2
| | | | Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* Add PHP 8.1 LDAP classes to ignored missing classes in psalm for docblocksCôme Chilliet2021-12-161-0/+3
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* Fix resource usages in OC_ImageCôme Chilliet2021-10-281-0/+4
| | | | | | This makes sure using resource or GdImage (PHP>=8) behaves the same. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* Allow "TwoFactor Nextcloud Notifications" to pull the state of the 2FA againJoas Schilling2021-10-041-0/+1
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Do not cache file ids in FileSystemTags inside group foldersRichard Steinmetz2021-09-141-0/+5
| | | | Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
* Add whitelist for apps inside of the server repoJulius Härtl2020-12-281-1/+29
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Suppress psalm warnings about app classesJulius Härtl2020-12-091-0/+7
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Add Psalm Taint Flow AnalysisLukas Reschke2020-11-201-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds the Psalm Security Analysis, as described at https://psalm.dev/docs/security_analysis/ It also adds a plugin for adding input into AppFramework. The results can be viewed in the GitHub Security tab at https://github.com/nextcloud/server/security/code-scanning **Q&A:** Q: Why do you not use the shipped Psalm version? A: I do a lot of changes to the Psalm Taint behaviour. Using released versions is not gonna get us the results we want. Q: How do I improve false positives? A: https://psalm.dev/docs/security_analysis/avoiding_false_positives/ Q: How do I add custom sources? A: https://psalm.dev/docs/security_analysis/custom_taint_sources/ Q: We should run this on apps! A: Yes. Q: What will change in Psalm? A: Quite some of the PHP core functions are not yet marked to propagate the taint. This leads to results where the taint flow is lost. That's something that I am currently working on. Q: Why is the plugin MIT licensed? A: Because its the first of its kind (based on GitHub Code Search) and I want other people to copy it if they want to. Security is for all :) Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* LDAP simplify User_Proxy and Group_Proxy signaturesArthur Schiwon2020-10-231-1/+0
| | | | | | | | | - make User_Proxy and Group_Proxy easy to instantiate - simplify dependent code - move commands to info.xml - make UpdateGroups job class non-static Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* Add stubs for gd, intl, IntlChar, ldap, redis_cluster and xslMorris Jobke2020-08-181-0/+6
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Add psalm baselineMorris Jobke2020-08-181-0/+1
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Suppress warning for template functions.Daniel Kesselberg2020-08-181-1/+21
| | | | | https://github.com/nextcloud/server/blob/6e8e34fef920a073118c22111f0f31eb3b3a91dc/lib/private/legacy/template/functions.php Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Fix variable name for referenced variable.Daniel Kesselberg2020-08-181-2/+2
| | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Supress UndefinedGlobalVariable for register_command.phpDaniel Kesselberg2020-08-181-0/+3
| | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Remove directory/file element.Daniel Kesselberg2020-08-181-4/+0
| | | | | | It will suppress any error of that kind in the file. That was not intended. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Suppress warning for $_ and $lDaniel Kesselberg2020-08-181-1/+9
| | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Fix: UndefinedFunction Function x does not exist in templatesDaniel Kesselberg2020-08-181-1/+12
| | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Add template functionsDaniel Kesselberg2020-08-181-0/+1
| | | | | | for some reason they are not loaded by default. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Add stubs for phpseclibDaniel Kesselberg2020-08-181-1/+4
| | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Hello psalmDaniel Kesselberg2020-08-181-0/+38
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-27 07:51:29 +0000