| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| | |
| | |
| | |
| | | |
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
|
| | |
| | |
| | |
| | |
| | |
| | | |
untill we need it
Signed-off-by: Robin Appelman <robin@icewind.nl>
|
|/ /
| |
| |
| |
| |
| | |
Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de>
Co-authored-by: Joas Schilling <213943+nickvergessen@users.noreply.github.com>
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
|
|\ \
| | |
| | | |
feat: add negative compare-and-delete to imemcache
|
| | |
| | |
| | |
| | | |
Signed-off-by: Robin Appelman <robin@icewind.nl>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
|/ /
| |
| |
| |
| |
| | |
And not forbidden basenames as this is used for different purposes.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
|
| |
| |
| |
| |
| |
| |
| | |
PHP 8.1 allows us to now move the `new` into the initializer,
this makes the code a bit nicer (and 3 lines shorter).
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
|
|\ \
| | |
| | | |
Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>
|
| |\ \
| | | |
| | | | |
Fix for ignored `CSP_NONCE` in ContentSecurity Header
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
This way we use the CSP nonce for dynamically loaded scripts.
Important to notice: The CSP nonce must NOT be injected in `content` as
this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors).
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
|
| |/ /
| | |
| | |
| | | |
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
When checking for public (web) access to the data directory the status is not enough
as you might have a webserver that forwards to e.g. a login page.
So instead check that the content of the file matches.
For this the `.ncdata` file (renamed from `.ocdata`¹) has minimal text content
to allow checking.
¹The file was renamed from the legacy `.ocdata`, there is a repair step to remove the old one.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Julius Härtl <jus@bitgrid.net>
|
| |\ \ |
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
|
| |\ \ \ |
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
|
| | |/ /
| |/| |
| | | |
| | | | |
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
|
| | | |
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>
Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
|
| |/ /
| | |
| | |
| | | |
Signed-off-by: Robin Appelman <robin@icewind.nl>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Julius Härtl <jus@bitgrid.net>
|
| |\ \
| | | |
| | | | |
Migration Attributes
|
| | | |
| | | |
| | | | |
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| |\ \ \
| | |/ /
| |/| | |
fix: `OCP\Files\Node\Folder::search` was not setting the owner
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
The owner was not set on the file info causing e.g. webdav searches to never return the known owner.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
|
| |\ \ \ |
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: provokateurin <kate@provokateurin.de>
|
| |\ \ \ \
| | |/ / /
| |/| | | |
Avoid using partial file info as valid one
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Julius Härtl <jus@bitgrid.net>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
|
| |\ \ \ \
| | | | | |
| | | | | | |
fix: cast to bigint on postgresql
|
| | |/ / /
| | | | |
| | | | |
| | | | | |
Signed-off-by: Robin Appelman <robin@icewind.nl>
|
| |\ \ \ \
| | | | | |
| | | | | | |
feat(users): Add users and group management to admin delegation
|
| | |/ / /
| | | | |
| | | | |
| | | | | |
Signed-off-by: Louis Chemineau <louis@chmn.me>
|
| |/ / /
| | | |
| | | |
| | | | |
Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
processing API
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
|
| |\ \ \
| | | | |
| | | | | |
refactor: Migrate some legacy and core functions to `IFilenameValidator`
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
|
| |\ \ \ \
| | |/ / /
| |/| | | |
feat(security): restrict admin actions to IP ranges
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
for "in range"
Signed-off-by: Joas Schilling <coding@schilljs.com>
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
|
| |\ \ \ \
| | |/ / /
| |/| | | |
fix(deps): Deprecate functionality deprecated by doctrine and test on more oracle versions
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
`IExpressionBuilder::and()` without parameters
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
removed upstream platforms
Signed-off-by: Joas Schilling <coding@schilljs.com>
|