summaryrefslogtreecommitdiffstats
path: root/tests
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #14856 from rullzer/remote_avatarsMorris Jobke2015-08-291-12/+17
|\ | | | | Allow Remote avatars
| * Allow remote avatarsRoeland Jago Douma2015-08-291-12/+17
| |
* | Merge pull request #18620 from owncloud/add-public-interface-for-factoryVincent Petry2015-08-291-0/+1
|\ \ | |/ |/| Add a public interface for the language factory so apps can use it
| * Add a test for the interfaceJoas Schilling2015-08-281-0/+1
| |
* | Merge pull request #18423 from owncloud/occ_encrypt_allBjörn Schießle2015-08-283-55/+141
|\ \ | | | | | | occ command line tool to encrypt all files
| * | copy always file by file to encrypt/decrypt it if neededBjoern Schiessle2015-08-261-53/+8
| | |
| * | occ tool to encrypt all filesBjoern Schiessle2015-08-263-2/+133
| | |
* | | Use certificates that expire in 10 yearsLukas Reschke2015-08-273-33/+48
| |/ |/| | | | | :speak_no_evil: :speak_no_evil: :speak_no_evil:
* | Merge pull request #17662 from owncloud/locking-dbThomas Müller2015-08-262-0/+73
|\ \ | | | | | | Database backend for locking
| * | log a warning while trying to acquire a db lock from within a transactionRobin Appelman2015-08-101-1/+1
| | |
| * | Fix db schemaRobin Appelman2015-08-031-1/+1
| | |
| * | Add database backend for high level lockingRobin Appelman2015-08-031-0/+43
| | |
| * | split off keeping track of acquire locksRobin Appelman2015-08-031-0/+30
| | |
* | | Explicitly specify status code 200 as response codeLukas Reschke2015-08-251-0/+4
| | | | | | | | | | | | Potentially fixes https://github.com/owncloud/core/issues/17586
* | | Merge pull request #18491 from owncloud/expire-token-after-12h-or-loginLukas Reschke2015-08-241-7/+116
|\ \ \ | | | | | | | | Expire token after 12h and if user logged-in again
| * | | Expire token after 12h and if user logged-in againLukas Reschke2015-08-221-7/+116
| | | | | | | | | | | | | | | | As an hardening measure we should expire password reset tokens after 12h and if the user has logged-in again successfully after the token was requested.
* | | | Merge pull request #18482 from owncloud/encrypt-session-dataMorris Jobke2015-08-243-0/+136
|\ \ \ \ | | | | | | | | | | Add a session wrapper to encrypt the data before storing it on disk
| * | | | Handle failures gracefully, remove switchLukas Reschke2015-08-211-3/+4
| | | | |
| * | | | Add a session wrapper to encrypt the data before storing it on diskJoas Schilling2015-08-213-0/+135
| |/ / /
* | | | Merge pull request #18254 from owncloud/mitigate-breachMorris Jobke2015-08-2412-16/+130
|\ \ \ \ | |/ / / |/| | | Add mitigation against BREACH
| * | | Add mitigation against BREACHLukas Reschke2015-08-1412-16/+130
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | While BREACH requires the following three factors to be effectively exploitable we should add another mitigation: 1. Application must support HTTP compression 2. Response most reflect user-controlled input 3. Response should contain sensitive data Especially part 2 is with ownCloud not really given since user-input is usually only echoed if a CSRF token has been passed. To reduce the risk even further it is however sensible to encrypt the CSRF token with a shared secret. Since this will change on every request an attack such as BREACH is not feasible anymore against the CSRF token at least.
* | | | Merge pull request #18426 from owncloud/joblist-next-non-existingMorris Jobke2015-08-211-0/+26
|\ \ \ \ | | | | | | | | | | handle non existing job classes in $jobList->getNext
| * | | | handle non existing job classes in $jobList->getNextRobin Appelman2015-08-191-0/+26
| | |_|/ | |/| |
* | | | Merge pull request #18457 from owncloud/test-traitsRobin McCorkell2015-08-204-44/+127
|\ \ \ \ | | | | | | | | | | Move common test logic to re-usable traits
| * | | | add test mountprovider logic to a traitRobin Appelman2015-08-202-31/+60
| | | | |
| * | | | allow moving common test logic into traitsRobin Appelman2015-08-203-14/+68
| | | | |
* | | | | Merge pull request #18372 from ↵Joas Schilling2015-08-201-1/+196
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | owncloud/issue-18358-object-type-and-id-for-activities Issue 18358 object type and id for activities
| * | | | Add test coverage for Activity Event and ManagerJoas Schilling2015-08-201-1/+196
| | | | |
* | | | | Merge pull request #18369 from owncloud/occ-logMorris Jobke2015-08-202-0/+302
|\ \ \ \ \ | | | | | | | | | | | | occ commands to manage logging
| * | | | | Unit tests for occ log:* commandsRobin McCorkell2015-08-192-0/+302
| | | | | |
* | | | | | Merge pull request #17434 from owncloud/update-showappnameonappupdateMorris Jobke2015-08-201-0/+70
|\ \ \ \ \ \ | | | | | | | | | | | | | | Display app names in update page for app updates
| * | | | | | Additions to update pageVincent Petry2015-08-201-3/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Apps to update and to disable will always be shown. Main title changes only when apps need updated, not core. Added bullet style. Exclude incompatible apps from updated apps list.
| * | | | | | Display app names in update page for app updatesVincent Petry2015-08-191-0/+67
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Whenever the update page is displayed for apps, show app names instead of the core update text.
* | | | | | | Merge pull request #18432 from owncloud/ext-backends.simpleMorris Jobke2015-08-191-21/+0
|\ \ \ \ \ \ \ | |_|_|/ / / / |/| | | | | | Migrate simple external storage backends to new registration API [part 1]
| * | | | | | Revert "Fix mounting wrapped storages resulting in many-layered wrapping"Robin McCorkell2015-08-191-21/+0
| | |_|/ / / | |/| | | | | | | | | | | | | | | | This reverts commit 75a5e6e12b18a9f5b7b113cd7e2c9c56c204084d.
* / | | | | Filter the objectstore password from the config list as wellJoas Schilling2015-08-191-0/+17
|/ / / / /
* | | | | Move avatarcontroller towards Node ApiRoeland Jago Douma2015-08-181-11/+11
| | | | |
* | | | | Merge pull request #17182 from owncloud/user_ini_upload_sizeRobin McCorkell2015-08-173-0/+202
|\ \ \ \ \ | |_|/ / / |/| | | | Update .user.ini when setting upload size limit
| * | | | Unit test OC_Files::setUploadLimit()Robin McCorkell2015-07-203-0/+202
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There was also a bug with checking the upper limit on the passed upload size. PHP does funny things with integer vs float comparisons, so our check didn't work. Now the check is much simpler, and ensures the value is sane.
* | | | | [test] more tests for UserController::setMailAddressMorris Jobke2015-08-171-5/+13
| |_|/ / |/| | | | | | | | | | | * fixes #12885
* | | | Merge pull request #17982 from owncloud/appframework-sanitize-nameThomas Müller2015-08-121-0/+19
|\ \ \ \ | | | | | | | | | | Sanitize class names before registerService/query
| * | | | Sanitize class names before registerService/queryRobin McCorkell2015-07-301-0/+19
| | | | | | | | | | | | | | | | | | | | | | | | | Leading backslashes are removed, so a `registerService('\\OC\\Foo')` can still be resolved with `query('OC\\Foo')`.
* | | | | Merge pull request #18127 from owncloud/dav-request-testsThomas Müller2015-08-125-0/+405
|\ \ \ \ \ | | | | | | | | | | | | add test framework for doing full request webdav tests
| * | | | | fix setup/teardownRobin Appelman2015-08-111-11/+18
| | | | | |
| * | | | | split out creating the sabre dav server to it's own factoryRobin Appelman2015-08-111-31/+13
| | | | | |
| * | | | | add test framework for doing full request webdav testsRobin Appelman2015-08-115-0/+416
| | | | | |
* | | | | | Merge pull request #17852 from owncloud/register-alias-factoryRobin McCorkell2015-08-112-14/+47
|\ \ \ \ \ \ | | | | | | | | | | | | | | Add test for factories
| * | | | | | add test for factoriesBernhard Posselt2015-07-252-14/+47
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | use ref for factory test use a factory for registerAlias Ensure we construct SimpleContainer Use single instance of DIContainer in routing tests
* | | | | | | Merge pull request #17868 from owncloud/x-forwarded-forThomas Müller2015-08-111-1/+48
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | Set default 'forwarded for' headers for reverse proxy
| * | | | | | | Add setup check for reverse proxy header configurationRobin McCorkell2015-08-101-1/+48
| | | | | | | |