Commit message (Expand) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Move settings to an app | Christoph Wurst | 2019-09-28 | 1 | -1/+1 |
* | SessionMiddleware: declare session property | Roeland Jago Douma | 2019-08-28 | 1 | -12/+4 |
* | Add tests | Roeland Jago Douma | 2019-08-10 | 3 | -0/+355 |
* | Add feature policy header | Roeland Jago Douma | 2019-08-10 | 3 | -1/+4 |
* | Update CSP test cases to handle the new form-action | Roeland Jago Douma | 2019-07-31 | 1 | -58/+58 |
* | Split up security middleware | Roeland Jago Douma | 2019-07-27 | 2 | -97/+149 |
* | Merge pull request #15714 from nextcloud/fix/204_304_rfc | Roeland Jago Douma | 2019-05-24 | 1 | -10/+9 |
|\ | |||||
| * | Check the actual status code for 204 and 304 | Roeland Jago Douma | 2019-05-24 | 1 | -10/+9 |
* | | Make it possible to show admin settings for sub admins | Christoph Wurst | 2019-05-23 | 1 | -16/+47 |
|/ | |||||
* | Set empty CSP by default | Roeland Jago Douma | 2019-04-16 | 3 | -4/+4 |
* | [#11236] Set parameter type in QBMapper | Marius David Wieschollek | 2019-03-24 | 1 | -0/+241 |
* | Add StandaloneTemplateResponse | Roeland Jago Douma | 2019-02-06 | 1 | -0/+17 |
* | No need to emit additonalscript event on public pages | Roeland Jago Douma | 2019-02-05 | 1 | -0/+10 |
* | Emit to load additionalscripts | Roeland Jago Douma | 2019-01-31 | 1 | -0/+108 |
* | Allow resources via OCS as well | Joas Schilling | 2019-01-22 | 1 | -0/+85 |
* | Set default frame-ancestors to 'self' | Roeland Jago Douma | 2019-01-08 | 4 | -61/+61 |
* | CSP: Allow fonts to be provided in data | Roeland Jago Douma | 2019-01-07 | 4 | -62/+62 |
* | Cleanup middleware registering | Roeland Jago Douma | 2019-01-03 | 1 | -9/+10 |
* | Only trust the X-FORWARDED-HOST header for trusted proxies | Roeland Jago Douma | 2018-12-17 | 1 | -53/+90 |
* | Fix tests | Roeland Jago Douma | 2018-11-02 | 2 | -17/+7 |
* | Adding handling of CIDR notation to trusted_proxies for IPv4 | Oliver Wegner | 2018-10-30 | 1 | -0/+115 |
* | Add report-uri to CSP | Roeland Jago Douma | 2018-10-21 | 1 | -0/+15 |
* | Disallow unsafe-eval by default | Roeland Jago Douma | 2018-10-14 | 4 | -60/+67 |
* | Do not use file as template parameter | Roeland Jago Douma | 2018-08-09 | 1 | -1/+1 |
* | Fix direct access to authen page | Roeland Jago Douma | 2018-06-20 | 1 | -0/+2 |
* | Add AuthPublicShareControllerTest | Roeland Jago Douma | 2018-06-20 | 1 | -0/+157 |
* | Add PublicShareControllerTests | Roeland Jago Douma | 2018-06-20 | 1 | -0/+102 |
* | Add PublicShareMiddlewareTest | Roeland Jago Douma | 2018-06-20 | 1 | -0/+287 |
* | Move caching logic to response | Roeland Jago Douma | 2018-06-04 | 1 | -2/+12 |
* | Merge pull request #8593 from eneiluj/master | Morris Jobke | 2018-03-08 | 1 | -10/+78 |
|\ | |||||
| * | Add tests | Roeland Jago Douma | 2018-03-08 | 1 | -10/+78 |
* | | Remove testcase | Roeland Jago Douma | 2018-03-05 | 1 | -1/+0 |
|/ | |||||
* | Add test for PublicTemplateResponse | Julius Härtl | 2018-02-27 | 1 | -0/+84 |
* | Merge pull request #8541 from nextcloud/translate-permission-error-page | Morris Jobke | 2018-02-26 | 1 | -7/+7 |
|\ | |||||
| * | Provide translated error message for permission error | Morris Jobke | 2018-02-26 | 1 | -7/+7 |
* | | Fix proper types | Roeland Jago Douma | 2018-02-22 | 1 | -1/+1 |
|/ | |||||
* | Fix tests | Roeland Jago Douma | 2018-02-21 | 2 | -12/+18 |
* | Update tests | Roeland Jago Douma | 2018-01-29 | 1 | -8/+20 |
* | Fix risky tests without assertions | Joas Schilling | 2018-01-25 | 3 | -4/+7 |
* | Fix "Undefined method setExpectedException()" | Joas Schilling | 2018-01-24 | 6 | -24/+25 |
* | Properly log the full exception instead of only the message | Morris Jobke | 2018-01-23 | 1 | -4/+2 |
* | Remove not needed 3rdparty app disabling during upgrade for PHP 5.x | Morris Jobke | 2018-01-19 | 1 | -1/+0 |
* | Remove deprecated core API | Joas Schilling | 2018-01-15 | 2 | -24/+3 |
* | Move passwordconfirmation to its own midleware | Roeland Jago Douma | 2018-01-02 | 2 | -10/+130 |
* | disable password confirmation with SSO | Bjoern Schiessle | 2018-01-02 | 1 | -1/+10 |
* | allow 'Nextcloud' in the user agent string of Android | Bjoern Schiessle | 2017-12-12 | 1 | -0/+14 |
* | Merge pull request #6921 from nextcloud/appmanager-securitymiddleware | Roeland Jago Douma | 2017-10-24 | 1 | -1/+9 |
|\ | |||||
| * | Use proper DI for security middleware for app enabled check | Morris Jobke | 2017-10-24 | 1 | -1/+9 |
* | | Use ::class in test mocks | Morris Jobke | 2017-10-24 | 8 | -17/+24 |
|/ | |||||
* | Handle SameSiteCookie check for index.php in AppFramework Middleware | Roeland Jago Douma | 2017-09-24 | 2 | -2/+145 |