| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
| |
Doing this in the PHP code is not the right approach for multiple reasons:
1. A bug in the PHP code prevents them from being added to the response.
2. They are only added when something is served via PHP and not in other cases (that makes for example the newest IE UXSS which is not yet patched by Microsoft exploitable on ownCloud)
3. Some headers such as the Strict-Transport-Security might require custom modifications by administrators. This was not possible before and lead to buggy situations.
This pull request moves those headers out of the PHP code and adds a security check to the admin settings performed via JS.
|
|\
| |
| | |
Add detection for invalid CLI configuration for settings page
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This change will log all failures that prevent the CLI cronjob from happening to the database and display a warning to administrators when an error happened.
To test:
1. Configure some invalid CLI php.ini settings
2. Enable the CLI cronjob and run php cron.php
3. See the errors printed and also in the admin page
4. Configure the CLI settings correctly
5. Errors should be gone.
Fixes https://github.com/owncloud/core/issues/13994
|
| | |
|
| | |
|
| | |
|
|/ |
|
|\
| |
| | |
clarify link on apps management to the dev documentation
|
| | |
|
|/
|
|
|
|
|
|
| |
Nobody reads the warnings anyways and so we should enforce it at installation time... Also allows us to get rid of some duplicated code.
To test change the `default_charset` to something other than `utf-8` or `UTF-8`, both should work fine with that change here. An error should then get shown.
We already set those default charsets in the shipped .user.ini and .htaccess
|
|\
| |
| | |
Make the password changed msg inline to fix #10242
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
APCu before 4.0.6 is unbelievable buggy and tend to segfault the PHP process (i.e. the whole webserver)
This potentially fixes https://github.com/owncloud/core/issues/14175
Requires a backport to stable8
|
|\ \
| | |
| | | |
Add `rel="noreferrer"` where possible and switch to HTTPS
|
| | | |
|
| | |
| | |
| | |
| | | |
Just to follow good practise and prevent some automated scanners to complain about "Cross-domain Referer leakage".
|
|\ \ \
| | | |
| | | | |
Added overview of groups a user is member of
|
| | |/
| |/| |
|
|\ \ \
| |/ /
|/| | |
Clean-up of messages (orthography, format)
|
| | |
| | |
| | | |
Added the missing space between value and unit, as it is formatted in all other places across ownCloud.
|
|\ \ \
| | | |
| | | | |
Disable autocomplete for SMTP Password
|
| | |/
| |/|
| | |
| | | |
While really nearly no modern browser cares about it anymore too much it's still not wrong to have it here (and also stops some automated scanners reporting this...)
|
| |/
|/|
| | |
Just a cosmetic detail, but very obvious when working on localisations.
|
| | |
|
| | |
|
| | |
|
|/
|
|
| |
While really nearly no modern browser cares about it anymore too much it's still not wrong to have it here (and also stops some automated scanners reporting this...)
|
| |
|
|\
| |
| | |
add a Windows warning
|
| | |
|
|/ |
|
|
|
|
|
|
|
| |
* gives the user the chance to verify it's mail address
and display name
* ref #12823
* fixes #13393
|
|\
| |
| | |
Logfile download
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
add logSettingsController
add download logfile button
move getEntries to LogSettingsController
move set log level to logsettingscontroller.php
add warning if logfile is bigger than 100MB
add unit test for set log level
fix typecasting, add new line at EoF
show log and logfile download only if log_type is set to owncloud
add unit test for getFilenameForDownload
|
| | |
|
|/ |
|
|
|
|
| |
Those domains are now accessible via HTTPS
|
|\
| |
| | |
Mail address of users is now changable in the user management
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* introduced new route settings/users/{id}/mailAddress
* kept old responses
* better error messages
* dropped lostpassword.php from settings/ajax
* cleaned up the UserList.add() and hand in user object instead of
each attribute as another parameter
* check for change permission of mail address
* proper response messages
|
|\ \
| | |
| | | |
Wave accessibility compliance
|
| | | |
|
|\ \ \
| |_|/
|/| | |
make sure styles and scripts are only loaded once
|
| |/ |
|
|/
|
|
|
|
| |
* supply mail address
* send mail with username and URL to that mail address
* option to temporary enable this feature
|
|\
| |
| | |
adding dependencies for command line tools and php libraries
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
* add switch to settings to show user backend
* user classes for headers and rows to unify the show/hide statement
* add user backend to response of user create request
* proper markup in settings area
|
| | |
|
|/ |
|
|
|
|
| |
Fix #10836
|