Commit message (Expand) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Move overwritehost check to isTrustedDomain | Julius Härtl | 2019-12-07 | 1 | -1/+16 |
* | Mode to modern phpunit | Roeland Jago Douma | 2019-11-27 | 16 | -52/+54 |
* | Make phpunit8 compatible | Roeland Jago Douma | 2019-11-27 | 20 | -21/+21 |
* | Some php-cs fixes | Roeland Jago Douma | 2019-11-22 | 11 | -9/+12 |
* | make TrustedDomainHelper case insensitive | Johannes Koenig | 2019-10-06 | 1 | -0/+5 |
* | Harden identifyproof openssl code | Roeland Jago Douma | 2019-09-14 | 1 | -7/+14 |
* | Fix report of phpstan in Limiter | Roeland Jago Douma | 2019-08-19 | 1 | -8/+0 |
* | Add tests | Roeland Jago Douma | 2019-08-10 | 2 | -0/+137 |
* | Update CSP test cases to handle the new form-action | Roeland Jago Douma | 2019-07-31 | 1 | -2/+6 |
* | Add support for CSP_NONCE server variable | Sam Bull | 2019-07-18 | 1 | -2/+21 |
* | Add an event to edit the CSP | Roeland Jago Douma | 2019-07-08 | 2 | -2/+96 |
* | Merge pull request #13327 from nextcloud/allow-bracket-notation-for-remove-ip... | Morris Jobke | 2019-03-06 | 1 | -0/+4 |
|\ | |||||
| * | Allow bracket IPv6 address format inside IPAdress Normalizer | Thomas Citharel | 2019-01-03 | 1 | -0/+4 |
* | | Fix the thorrtler whitelist bitmask | Roeland Jago Douma | 2019-02-11 | 1 | -0/+29 |
* | | Set default frame-ancestors to 'self' | Roeland Jago Douma | 2019-01-08 | 1 | -1/+1 |
* | | CSP: Allow fonts to be provided in data | Roeland Jago Douma | 2019-01-07 | 1 | -1/+1 |
|/ | |||||
* | Disallow unsafe-eval by default | Roeland Jago Douma | 2018-10-14 | 1 | -0/+2 |
* | Fix tests | Roeland Jago Douma | 2018-05-14 | 1 | -1/+2 |
* | Add ARGON2I support to the hasher | Roeland Jago Douma | 2018-04-04 | 1 | -36/+86 |
* | Fix risky tests without assertions | Joas Schilling | 2018-01-25 | 1 | -0/+1 |
* | Make OCP\Security stricter | Roeland Jago Douma | 2018-01-16 | 1 | -4/+0 |
* | Make OC\Security\RateLimiting strict | Roeland Jago Douma | 2018-01-14 | 1 | -2/+2 |
* | Fix tests | Roeland Jago Douma | 2017-12-18 | 1 | -1/+1 |
* | Use ::class in test mocks of encryption app | Morris Jobke | 2017-10-26 | 1 | -1/+2 |
* | Use ::class in test mocks | Morris Jobke | 2017-10-24 | 3 | -4/+5 |
* | add prefix to user and system keys to avoid name collisions | Bjoern Schiessle | 2017-08-10 | 1 | -5/+5 |
* | extend the identity proof manager to allow system wide key pairs | Bjoern Schiessle | 2017-08-10 | 1 | -11/+62 |
* | Add bruteforce capabilities | Roeland Jago Douma | 2017-07-13 | 1 | -0/+68 |
* | Write cert bundle to tmp file first | Roeland Jago Douma | 2017-07-12 | 1 | -2/+15 |
* | Automatic creation of Identity manager | Joas Schilling | 2017-05-10 | 1 | -3/+14 |
* | Add missing space | Lukas Reschke | 2017-05-01 | 1 | -1/+1 |
* | Mark IP as whitelisted if brute force protection is disabled | Lukas Reschke | 2017-05-01 | 1 | -8/+51 |
* | Remove expired attempts | Lukas Reschke | 2017-04-13 | 1 | -5/+13 |
* | Add support for ratelimiting via annotations | Lukas Reschke | 2017-04-13 | 4 | -45/+358 |
* | Respect bruteforce settings in the Throttler | Roeland Jago Douma | 2017-04-02 | 1 | -1/+89 |
* | Fix unit tests | Morris Jobke | 2017-03-28 | 1 | -1/+1 |
* | Add base-uri to CSP policy | Lukas Reschke | 2017-03-16 | 1 | -1/+1 |
* | dont write a certificate bundle if the shipped ca bundle is empty | Robin Appelman | 2017-01-09 | 1 | -3/+4 |
* | Add Identityproof tests | Roeland Jago Douma | 2016-11-24 | 3 | -1/+250 |
* | Add a signer class for signing | Lukas Reschke | 2016-11-21 | 1 | -0/+166 |
* | Add tests | Lukas Reschke | 2016-11-02 | 1 | -0/+13 |
* | Inject config and logger | Joas Schilling | 2016-11-02 | 1 | -3/+9 |
* | Fix CSRF token generation / validation | Leon Klingele | 2016-11-02 | 2 | -4/+12 |
* | Move browserSupportsCspV3 to CSPNonceManager | Roeland Jago Douma | 2016-10-25 | 1 | -1/+3 |
* | Add ContentSecurityPolicyNonceManager | Lukas Reschke | 2016-10-24 | 1 | -0/+57 |
* | Add support for CSP nonces | Lukas Reschke | 2016-10-24 | 2 | -0/+23 |
* | Fix getMock CertificateMangerTest | Roeland Jago Douma | 2016-09-13 | 1 | -2/+3 |
* | Fix getMock Security | Roeland Jago Douma | 2016-09-07 | 2 | -4/+4 |
* | Implement brute force protection | Lukas Reschke | 2016-07-20 | 1 | -0/+123 |
* | add test for needsRebundling() check | Bjoern Schiessle | 2016-07-11 | 1 | -0/+92 |