| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
| |
As discussed in https://github.com/nextcloud/server/issues/11594 when discovering if
x-forwarded-for is working properly its not possible to use getRemoteAddr because
the "client ip" is returned. For this check the ip of the last hop would be required.
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
|
|
|
|
| |
Signed-off-by: Julius Härtl <jus@bitgrid.net>
|
|
|
|
| |
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
|
|\
| |
| | |
adding .well-known/webfinger
|
| |
| |
| | |
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
|
|\ \
| | |
| | | |
Remove cookies from Clear-Site-Data Header
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
In https://github.com/nextcloud/server/commit/2f87fb6b456fd109c90a5093c31b7a3f62a32040 this header was introduced. The referenced documentation says:
> When delivered with a response from https://example.com/clear, the following header will cause cookies associated with the origin https://example.com to be cleared, as well as cookies on any origin in the same registered domain (e.g. https://www.example.com/ and https://more.subdomains.example.com/).
This also applies if `https://nextcloud.example.com/` sends the `Clear-Site-Data: "cookies"` header.
This is not the behavior we want at this point!
So I removed the deletion of cookies from the header. This has no effect on the logout process as this header is supported only recently and the logout works in old browsers as well.
Signed-off-by: Patrick Conrad <conrad@iza.org>
|
|\ \ \
| | | |
| | | | |
Add report-uri to CSP
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
|\ \ \ \
| | | | |
| | | | |
| | | | |
| | | | | |
nextcloud/fix-opening-a-section-again-in-the-files-app
Fix opening a section again in the Files app
|
| |/ / /
| | | |
| | | |
| | | | |
Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
|
|\ \ \ \
| | | | |
| | | | | |
Change typeface to Nunito
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
|
| |/ / /
|/| | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Updates the requirements on [polyserve](https://github.com/Polymer/tools) to permit the latest version.
- [Release notes](https://github.com/Polymer/tools/releases)
- [Commits](https://github.com/Polymer/tools/commits/polyserve@0.27.13)
Signed-off-by: dependabot[bot] <support@dependabot.com>
|
|/ / /
| | |
| | |
| | | |
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
|\ \ \
| | | |
| | | | |
Add proper backgroundjobs to OCP
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
|
|\ \ \ \
| | | | |
| | | | | |
Move files_drop to compiled handlebars
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
|\ \ \ \ \
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
nextcloud/bugfix/9326/make_sure_usermanager_getByEmail_only_returns_IUser
filter null values for UserManager::getByEmail
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
|
|\ \ \ \ \ \
| |_|/ / / /
|/| | | | | |
Fix welcome l10n
|
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
language.
Some related tests had to be changed because they relied on internals, see also from the PHPUnit documentation:
"Exercise caution when using [the at] matcher as it can lead to brittle tests which are too closely tied to specific implementation details."
Signed-off-by: Zulan <git@zulan.net>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Julius Härtl <jus@bitgrid.net>
|
| |_|_|/ /
|/| | | |
| | | | |
| | | | | |
Signed-off-by: Julius Härtl <jus@bitgrid.net>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
always query the lookup server in a global scale setup
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
|
|\ \ \ \ \ \
| | | | | | |
| | | | | | | |
Mandatory 2FA for groups
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
|
|\ \ \ \ \ \ \
| |/ / / / / /
|/| | | | | |
| | | | | | |
| | | | | | | |
eugulixes/improve-encrypt-all-and-decrypt-all-commands
Check if TTY is invalid in encryption:encrypt-all and encryption:decrypt-all
|
| | |_|/ / /
| |/| | | |
| | | | | |
| | | | | | |
Signed-off-by: Evgeny Golyshev <eugulixes@gmail.com>
|
|/ / / / /
| | | | |
| | | | |
| | | | | |
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Add admin interface to enforce 2FA
|
| | |_|_|/
| |/| | |
| | | | |
| | | | | |
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
|
|/ / / /
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
This is IMO a bit more readable and it seems to make the code faster.
Tested it on the company instance where there are over 3k calls to this
function. It shaves off around 10ms.
The advantage here is that the pattern gets optimized by php itsel and
cached.
Also looking for all patterns at the same time and especially no longer
looping for /./ patterns should save time.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
| |_|/
|/| |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
fixes #11617
The OCS routes are only absolute for now as they are often exposed to
the outside anyway and are on a different endpoint than index.php in
anyway.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
|
|\ \ \
| | | |
| | | | |
adjust Calendar resource / room interfaces to use class implementation
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
|
|\ \ \ \
| | | | |
| | | | | |
Rename admin security section
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
|
| |/ / /
| | | |
| | | |
| | | | |
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
|