| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|\ \
| | |
| | | |
Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>
|
| |\ \
| | | |
| | | | |
Fix for ignored `CSP_NONCE` in ContentSecurity Header
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
This way we use the CSP nonce for dynamically loaded scripts.
Important to notice: The CSP nonce must NOT be injected in `content` as
this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors).
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
|
| |/ /
| | |
| | |
| | | |
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
When checking for public (web) access to the data directory the status is not enough
as you might have a webserver that forwards to e.g. a login page.
So instead check that the content of the file matches.
For this the `.ncdata` file (renamed from `.ocdata`¹) has minimal text content
to allow checking.
¹The file was renamed from the legacy `.ocdata`, there is a repair step to remove the old one.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
|
| | |
| | |
| | |
| | | |
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
|
| | |
| | |
| | |
| | |
| | | |
Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>
Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Robin Appelman <robin@icewind.nl>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Julius Härtl <jus@bitgrid.net>
|
| |\ \
| | | |
| | | | |
Migration Attributes
|
| | | |
| | | |
| | | | |
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| |\ \ \
| | |/ /
| |/| | |
fix: `OCP\Files\Node\Folder::search` was not setting the owner
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
The owner was not set on the file info causing e.g. webdav searches to never return the known owner.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: provokateurin <kate@provokateurin.de>
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
|
| |\ \ \
| | | | |
| | | | | |
fix: cast to bigint on postgresql
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Robin Appelman <robin@icewind.nl>
|
| |\ \ \ \
| | | | | |
| | | | | | |
feat(users): Add users and group management to admin delegation
|
| | |/ / /
| | | | |
| | | | |
| | | | | |
Signed-off-by: Louis Chemineau <louis@chmn.me>
|
| |/ / /
| | | |
| | | |
| | | | |
Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
processing API
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
|
| |\ \ \
| | | | |
| | | | | |
refactor: Migrate some legacy and core functions to `IFilenameValidator`
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
|
| |\ \ \ \
| | |/ / /
| |/| | | |
feat(security): restrict admin actions to IP ranges
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
for "in range"
Signed-off-by: Joas Schilling <coding@schilljs.com>
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
|
| |\ \ \ \
| | |/ / /
| |/| | | |
fix(deps): Deprecate functionality deprecated by doctrine and test on more oracle versions
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
`IExpressionBuilder::and()` without parameters
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
removed upstream platforms
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
deprecated
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| |\ \ \ \
| | |/ / /
| |/| | | |
TaskProcessing follow-up
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
|
| |\ \ \ \
| | | | | |
| | | | | | |
Make filecache queries compatible with sharding
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Robin Appelman <robin@icewind.nl>
|
| | |/ / /
| | | | |
| | | | |
| | | | | |
Signed-off-by: Robin Appelman <robin@icewind.nl>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: provokateurin <kate@provokateurin.de>
|
| |\ \ \ \
| | | | | |
| | | | | | |
feat: hide caldav server settings if no app uses the caldav backend
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
|
| | |/ / /
| |/| | |
| | | | |
| | | | | |
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
|
| |\ \ \ \
| | | | | |
| | | | | | |
fix(mail): Fix big logos in mail templates for Outlook
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| |\ \ \ \ \
| | | | | | |
| | | | | | | |
refactor: Migrate filename validation from `Storage` and `Util` to `FilenameValidator`
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
|