| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|\
| |
| | |
Send OC version to appstore so it can reply with the right links
|
| | |
|
|\ \
| |/
|/| |
Request approved state for disabled apps with ocsid
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
In case an application gets disabled the level is set to "experimental" if it does not contain a `shipped` tag. This can for example be reproduced by installing the documents app from the appstore and then disabling it. Or cloning an app from git.
With this change the controller will now load the level of the application from the appstore if a valid OCSID has been provided.
Fixes https://github.com/owncloud/core/issues/17003
|
|/ |
|
|\
| |
| | |
Only sort by group name when LDAP is involved
|
| | |
|
| | |
|
|/ |
|
|\
| |
| | |
Sort user groups by group name and hide the user count
|
| | |
|
| | |
|
|/
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Without /dev/urandom being available to read the medium RNG will rely only on the following components on a Linux system:
1. MicroTime: microtime() . memory_get_usage() as seed and then a garbage collected microtime for loop
2. MTRand: chr((mt_rand() ^ mt_rand()) % 256)
3. Rand: chr((rand() ^ rand()) % 256)
4. UniqId: Plain uniqid()
An adversary with the possibility to predict the seed used by the PHP process may thus be able to predict future tokens which is an unwanted behaviour.
One should note that this behaviour is documented in our documentation to ensure that users get aware of this even without reading our documentation this will add a post setup check to the administrative interface.
Thanks to David Black from d1b.org for bringing this again to our attention.
|
|\
| |
| | |
[enc2]fixing recovery tooltip
|
| | |
|
| | |
|
| |
| |
| |
| | |
Stupid mistake in master, fixes https://github.com/owncloud/core/issues/16288
|
|/
|
|
| |
* fixes #16057
|
| |
|
|
|
|
| |
Also added unit-tests and better error-handling
|
|
|
|
| |
back-ends are enabled
|
|\
| |
| | |
Add different trust levels to AppStore interface
|
| |
| |
| |
| | |
Allows administrators to disable or enabled experimental applications as well as show the trust level.
|
|/ |
|
|
|
|
|
|
| |
Also used the opportunity to refactor it into an AppFramework controller so that we can unit test it.
Fixes https://github.com/owncloud/core/issues/14956
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Replaces the OC_Mail and phpmailer with SwiftMail allowing us to mock it properly.
Fixes the unit test execution on master on local machines and https://github.com/owncloud/core/issues/12014
Conflicts:
3rdparty
lib/private/server.php
lib/public/iservercontainer.php
tests/lib/mail.php
tests/settings/controller/mailsettingscontrollertest.php
Conflicts:
3rdparty
lib/private/mail.php
lib/private/server.php
lib/public/iservercontainer.php
settings/ajax/lostpassword.php
settings/application.php
|
|
|
|
|
|
|
|
|
|
| |
Doing this in the PHP code is not the right approach for multiple reasons:
1. A bug in the PHP code prevents them from being added to the response.
2. They are only added when something is served via PHP and not in other cases (that makes for example the newest IE UXSS which is not yet patched by Microsoft exploitable on ownCloud)
3. Some headers such as the Strict-Transport-Security might require custom modifications by administrators. This was not possible before and lead to buggy situations.
This pull request moves those headers out of the PHP code and adds a security check to the admin settings performed via JS.
|
|
|
|
| |
This reverts commit 6a1a4880f0d556fb090f19a5019fec31916f5c36.
|
| |
|
| |
|
| |
|
|\
| |
| | |
Fix subadmin listing of group
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| | |
Without this patch filtering for the "_everyone" (empty) group did not work for subadmins.
Fixes itself.
|
|/ |
|
|
|
|
|
|
|
|
|
|
|
| |
* reason: nice to know before password change in user management
* restore is possible:
* encryption is disabled
* encryption is enabled, admin and user has checked the
restore option
* if not possible:
* highlight users row in red once the admin wants to change the password
* show also a little tipsy
|
| |
|
|
|
|
|
|
| |
Previously when $gid was empty the users were not filtered at all. Rendering the search function in the user management pretty useless.
Fixes itself
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Otherwise every time the AppStore was opened a lot of connections to the AppStore server were made which resulted in a terrible performance.
This changeset will cache the response for a sensible time so that only the first request will be somewhat slow.
Performance changes:
- Loading a category took previously more than 3 seconds on my machine. Now for every follow-up request it takes less than 200ms, resulting in a performance gain of 1950%
- Loading the category list took previously about 750ms - now it takes 154ms, a total performance gain of 395%
|