| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
This prevents a misusage of \OC\Files\View by calling it with user-supplied input. In such cases an exception is now thrown.
|
|\
| |
| | |
Allow AppFramework applications to specify a custom CSP header
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This change allows AppFramework applications to specify a custom CSP header for example when the default policy is too strict. Furthermore this allows us to partially migrate away from CSS and allowed eval() in our JavaScript components.
Legacy ownCloud components will still use the previous policy. Application developers can use this as following in their controllers:
```php
$response = new TemplateResponse('activity', 'list', []);
$cspHelper = new ContentSecurityPolicyHelper();
$cspHelper->addAllowedScriptDomain('www.owncloud.org');
$response->addHeader('Content-Security-Policy', $cspHelper->getPolicy());
return $response;
```
Fixes https://github.com/owncloud/core/issues/11857 which is a pre-requisite for https://github.com/owncloud/core/issues/13458 and https://github.com/owncloud/core/issues/11925
|
|\ \
| | |
| | | |
Optimize quota calculation for propfind
|
| |/ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This changeset removes the static class `OC_Request` and moves the functions either into `IRequest` which is accessible via `\OC::$server::->getRequest()` or into a separated `TrustedDomainHelper` class for some helper methods which should not be publicly exposed.
This changes only internal methods and nothing on the public API. Some public functions in `util.php` have been deprecated though in favour of the new non-static functions.
Unfortunately some part of this code uses things like `__DIR__` and thus is not completely unit-testable. Where tests where possible they ahve been added though.
Fixes https://github.com/owncloud/core/issues/13976 which was requested in https://github.com/owncloud/core/pull/13973#issuecomment-73492969
|
| | |
|
|\ \
| | |
| | | |
Implement php code checker to detect usage of not allowed private ...
|
| | |
| | |
| | |
| | | |
including console command to check local code to be used by developers
|
|\ \ \
| | | |
| | | | |
Add an array implementation of cache and use it if we are not debugging
|
| | | | |
|
| | | | |
|
| |_|/
|/| | |
|
|\ \ \
| | | |
| | | | |
Additional controllermethodreflector inheritance tests
|
| | | | |
|
| | | | |
|
|\ \ \ \
| |_|_|/
|/| | |
| | | |
| | | | |
owncloud/group-share-collition-wrong-type-in-post-hook
Do not overwrite the shareType so the post hook is still correct
|
| | |/
| |/| |
|
| | | |
|
|\ \ \
| | | |
| | | | |
Add a controller and reponse for ocs
|
| | | | |
|
| | | | |
|
| | | | |
|
| |/ /
|/| |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
When `mod_unique_id` is enabled the ID generated by it will be used for logging. This allows for correlation of the Apache logs and the ownCloud logs.
Testplan:
- [ ] When `mod_unique_id` is enabled the request ID equals the one generated by `mod_unique_id`.
- [ ] When `mod_unique_id` is not available the request ID is a 20 character long random string
- [ ] The generated Id is stable over the lifespan of one request
Changeset looks a little bit larger since I had to adjust every unit test using the HTTP\Request class for proper DI.
Fixes https://github.com/owncloud/core/issues/13366
|
|\ \ \
| | | |
| | | | |
Updated the media type of some font types
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
TTF and TTF have now the same media type
Official since 2013 and supported by Firefox and Chrome
https://www.iana.org/assignments/media-types/application/font-sfnt
Introducing support for Type1 fonts
|
|\ \ \ \
| | | | |
| | | | | |
Use 403 instead of 200 response
|
| | | | |
| | | | |
| | | | |
| | | | | |
A forbidden should throw a 403 and this makes it easier for me to do some automated testing.
|
| |_|/ /
|/| | | |
|
| | | | |
|
|\ \ \ \
| | | | |
| | | | | |
Default to `null` for lostpassword
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
|/ / / / |
|
| |_|/
|/| | |
|
| | | |
|
| | | |
|
|/ / |
|
|\ \
| | |
| | | |
Prevent wrapping null storage
|
| | |
| | |
| | |
| | |
| | |
| | | |
Can happen when trying to instantiate external storages that have
incomplete config, where the constructor throws an exception (the
exception is caught in createStorage())
|
|\ \ \
| |/ /
|/| | |
Call final unlink in trash wrapper's storage
|
| | | |
|
|\ \ \
| | | |
| | | |
| | | |
| | | | |
owncloud/add-warning-if-restore-of-data-is-not-possible
Add value if restore of data is possible for a user
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
* reason: nice to know before password change in user management
* restore is possible:
* encryption is disabled
* encryption is enabled, admin and user has checked the
restore option
* if not possible:
* highlight users row in red once the admin wants to change the password
* show also a little tipsy
|
| | | |
| | | |
| | | |
| | | | |
problems for different primary storages
|
|/ / /
| | |
| | |
| | | |
user object
|
|\ \ \
| |_|/
|/| | |
Add a method to set/unset multiple config values with one write
|
| | | |
|