aboutsummaryrefslogtreecommitdiffstats
path: root/tests/lib/Security
Commit message (Expand)AuthorAgeFilesLines
* Move overwritehost check to isTrustedDomainJulius Härtl2019-12-071-1/+16
* Mode to modern phpunitRoeland Jago Douma2019-11-2716-52/+54
* Make phpunit8 compatibleRoeland Jago Douma2019-11-2720-21/+21
* Some php-cs fixesRoeland Jago Douma2019-11-2211-9/+12
* make TrustedDomainHelper case insensitiveJohannes Koenig2019-10-061-0/+5
* Harden identifyproof openssl codeRoeland Jago Douma2019-09-141-7/+14
* Fix report of phpstan in LimiterRoeland Jago Douma2019-08-191-8/+0
* Add testsRoeland Jago Douma2019-08-102-0/+137
* Update CSP test cases to handle the new form-actionRoeland Jago Douma2019-07-311-2/+6
* Add support for CSP_NONCE server variableSam Bull2019-07-181-2/+21
* Add an event to edit the CSPRoeland Jago Douma2019-07-082-2/+96
* Merge pull request #13327 from nextcloud/allow-bracket-notation-for-remove-ip...Morris Jobke2019-03-061-0/+4
|\
| * Allow bracket IPv6 address format inside IPAdress NormalizerThomas Citharel2019-01-031-0/+4
* | Fix the thorrtler whitelist bitmaskRoeland Jago Douma2019-02-111-0/+29
* | Set default frame-ancestors to 'self'Roeland Jago Douma2019-01-081-1/+1
* | CSP: Allow fonts to be provided in dataRoeland Jago Douma2019-01-071-1/+1
|/
* Disallow unsafe-eval by defaultRoeland Jago Douma2018-10-141-0/+2
* Fix testsRoeland Jago Douma2018-05-141-1/+2
* Add ARGON2I support to the hasherRoeland Jago Douma2018-04-041-36/+86
* Fix risky tests without assertionsJoas Schilling2018-01-251-0/+1
* Make OCP\Security stricterRoeland Jago Douma2018-01-161-4/+0
* Make OC\Security\RateLimiting strictRoeland Jago Douma2018-01-141-2/+2
* Fix testsRoeland Jago Douma2017-12-181-1/+1
* Use ::class in test mocks of encryption appMorris Jobke2017-10-261-1/+2
* Use ::class in test mocksMorris Jobke2017-10-243-4/+5
* add prefix to user and system keys to avoid name collisionsBjoern Schiessle2017-08-101-5/+5
* extend the identity proof manager to allow system wide key pairsBjoern Schiessle2017-08-101-11/+62
* Add bruteforce capabilitiesRoeland Jago Douma2017-07-131-0/+68
* Write cert bundle to tmp file firstRoeland Jago Douma2017-07-121-2/+15
* Automatic creation of Identity managerJoas Schilling2017-05-101-3/+14
* Add missing spaceLukas Reschke2017-05-011-1/+1
* Mark IP as whitelisted if brute force protection is disabledLukas Reschke2017-05-011-8/+51
* Remove expired attemptsLukas Reschke2017-04-131-5/+13
* Add support for ratelimiting via annotationsLukas Reschke2017-04-134-45/+358
* Respect bruteforce settings in the ThrottlerRoeland Jago Douma2017-04-021-1/+89
* Fix unit testsMorris Jobke2017-03-281-1/+1
* Add base-uri to CSP policyLukas Reschke2017-03-161-1/+1
* dont write a certificate bundle if the shipped ca bundle is emptyRobin Appelman2017-01-091-3/+4
* Add Identityproof testsRoeland Jago Douma2016-11-243-1/+250
* Add a signer class for signingLukas Reschke2016-11-211-0/+166
* Add testsLukas Reschke2016-11-021-0/+13
* Inject config and loggerJoas Schilling2016-11-021-3/+9
* Fix CSRF token generation / validationLeon Klingele2016-11-022-4/+12
* Move browserSupportsCspV3 to CSPNonceManagerRoeland Jago Douma2016-10-251-1/+3
* Add ContentSecurityPolicyNonceManagerLukas Reschke2016-10-241-0/+57
* Add support for CSP noncesLukas Reschke2016-10-242-0/+23
* Fix getMock CertificateMangerTestRoeland Jago Douma2016-09-131-2/+3
* Fix getMock SecurityRoeland Jago Douma2016-09-072-4/+4
* Implement brute force protectionLukas Reschke2016-07-201-0/+123
* add test for needsRebundling() checkBjoern Schiessle2016-07-111-0/+92