| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|\
| |
| |
| |
| | |
owncloud/add-some-headers-to-htaccess-for-my-best-friend-jenkins
Let users configure security headers in their Webserver
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Doing this in the PHP code is not the right approach for multiple reasons:
1. A bug in the PHP code prevents them from being added to the response.
2. They are only added when something is served via PHP and not in other cases (that makes for example the newest IE UXSS which is not yet patched by Microsoft exploitable on ownCloud)
3. Some headers such as the Strict-Transport-Security might require custom modifications by administrators. This was not possible before and lead to buggy situations.
This pull request moves those headers out of the PHP code and adds a security check to the admin settings performed via JS.
|
| | |
|
|/ |
|
|\
| |
| | |
Add detection for invalid CLI configuration for settings page
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This change will log all failures that prevent the CLI cronjob from happening to the database and display a warning to administrators when an error happened.
To test:
1. Configure some invalid CLI php.ini settings
2. Enable the CLI cronjob and run php cron.php
3. See the errors printed and also in the admin page
4. Configure the CLI settings correctly
5. Errors should be gone.
Fixes https://github.com/owncloud/core/issues/13994
|
| | |
|
|\ \
| | |
| | | |
Show time difference of last cron run instead of absolute time
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
|/ / |
|
|/ |
|
|\
| |
| | |
Revert "Updating license headers"
|
| |
| |
| |
| | |
This reverts commit 6a1a4880f0d556fb090f19a5019fec31916f5c36.
|
| | |
|
|\ \
| | |
| | | |
clarify link on apps management to the dev documentation
|
| |/ |
|
|\ \
| |/
|/| |
Move UTF-8 check to setup
|
| |
| |
| |
| |
| |
| |
| |
| | |
Nobody reads the warnings anyways and so we should enforce it at installation time... Also allows us to get rid of some duplicated code.
To test change the `default_charset` to something other than `utf-8` or `UTF-8`, both should work fine with that change here. An error should then get shown.
We already set those default charsets in the shipped .user.ini and .htaccess
|
| | |
|
|/ |
|
|\
| |
| | |
Make the password changed msg inline to fix #10242
|
| | |
|
|\ \
| | |
| | | |
don't allow installation of already installed apps - fixes #14004
|
| | | |
|
|/ / |
|
|\ \
| | |
| | | |
Make the search box filter apps
|
| | | |
|
| | | |
|
|\ \ \
| | | |
| | | | |
Update license headers
|
| | | | |
|
|/ / / |
|
| | | |
|
| | | |
|
| | | |
|
|\ \ \
| | | |
| | | | |
Manually type-cast all AJAX files
|
| | | | |
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
This enforces proper types on POST and GET arguments where I considered it sensible. I didn't update some as I don't know what kind of values they would support :see_no_evil:
Fixes https://github.com/owncloud/core/issues/14196 for core
|
|\ \ \ \
| | | | |
| | | | | |
Encode Requesttoken for avatars
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Fixes new avatar selection in master half, other half will work when https://github.com/owncloud/core/pull/14266 has get merged.
Shocking to see how much places in our code do it wrong :gun:
|
| |_|/ /
|/| | | |
|
| | | | |
|
|/ / /
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
APCu before 4.0.6 is unbelievable buggy and tend to segfault the PHP process (i.e. the whole webserver)
This potentially fixes https://github.com/owncloud/core/issues/14175
Requires a backport to stable8
|
|\ \ \
| | | |
| | | | |
Refactor OC_Request into TrustedDomainHelper and IRequest
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
This changeset removes the static class `OC_Request` and moves the functions either into `IRequest` which is accessible via `\OC::$server::->getRequest()` or into a separated `TrustedDomainHelper` class for some helper methods which should not be publicly exposed.
This changes only internal methods and nothing on the public API. Some public functions in `util.php` have been deprecated though in favour of the new non-static functions.
Unfortunately some part of this code uses things like `__DIR__` and thus is not completely unit-testable. Where tests where possible they ahve been added though.
Fixes https://github.com/owncloud/core/issues/13976 which was requested in https://github.com/owncloud/core/pull/13973#issuecomment-73492969
|
|/ / / |
|
|\ \ \
| | | |
| | | | |
Return milliseconds instead of seconds for lastLogin - refs #14005
|