Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | ci: Skip flaky test on PHP 8.3 | Joas Schilling | 2024-08-21 | 1 | -0/+4 | |
| | | | | Signed-off-by: Joas Schilling <coding@schilljs.com> | |||||
* | Merge pull request #43573 from nextcloud/HolgerHees-fix-csp-nonce-handling | Ferdinand Thiessen | 2024-08-13 | 4 | -262/+267 | |
|\ | | | | | Fix for ignored `CSP_NONCE` in ContentSecurity Header | |||||
| * | feat: Provide CSP nonce as `<meta>` element | Ferdinand Thiessen | 2024-08-13 | 1 | -1/+0 | |
| | | | | | | | | | | | | | | | | This way we use the CSP nonce for dynamically loaded scripts. Important to notice: The CSP nonce must NOT be injected in `content` as this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors). Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> | |||||
| * | test: Adjust tests for CSP nonce | Ferdinand Thiessen | 2024-08-13 | 4 | -261/+267 | |
| | | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> | |||||
* | | feat(auth): Clean-up unused auth tokens and wipe tokens | Christoph Wurst | 2024-08-13 | 1 | -11/+10 | |
| | | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at> | |||||
* | | fix(tests): Adapt tests to change of DefaultShareProvider constructor | Côme Chilliet | 2024-08-12 | 1 | -6/+15 | |
|/ | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> | |||||
* | fix(SetupCheck): Properly check public access to data directory | Ferdinand Thiessen | 2024-08-08 | 2 | -10/+10 | |
| | | | | | | | | | | | | | When checking for public (web) access to the data directory the status is not enough as you might have a webserver that forwards to e.g. a login page. So instead check that the content of the file matches. For this the `.ncdata` file (renamed from `.ocdata`¹) has minimal text content to allow checking. ¹The file was renamed from the legacy `.ocdata`, there is a repair step to remove the old one. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> | |||||
* | fix(session): Log when session_* calls are slow | Christoph Wurst | 2024-08-07 | 3 | -17/+17 | |
| | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at> | |||||
* | fix: Fix failing test for group listing | Julius Härtl | 2024-08-06 | 1 | -0/+6 | |
| | | | | Signed-off-by: Julius Härtl <jus@bitgrid.net> | |||||
* | Merge pull request #46967 from nextcloud/fix/share-not-found | John Molakvoæ | 2024-08-06 | 1 | -2/+4 | |
|\ | ||||||
| * | fix(files_sharing): show proper share not found error message | skjnldsv | 2024-08-06 | 1 | -2/+4 | |
| | | | | | | | | Signed-off-by: skjnldsv <skjnldsv@protonmail.com> | |||||
* | | Merge pull request #46985 from nextcloud/feat/email-share-format | John Molakvoæ | 2024-08-06 | 3 | -20/+20 | |
|\ \ | ||||||
| * | | fix: emails tests after new design fixes | skjnldsv | 2024-08-06 | 3 | -20/+20 | |
| | | | | | | | | | | | | Signed-off-by: skjnldsv <skjnldsv@protonmail.com> | |||||
* | | | chore(tests): Adapt tests to the group:list change | Côme Chilliet | 2024-08-06 | 1 | -28/+32 | |
| |/ |/| | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> | |||||
* | | fix: unify bundle naming | Jérôme Herbinet | 2024-08-06 | 1 | -1/+1 | |
| | | | | | | | | | | Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com> Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de> | |||||
* | | chore: delete repair step for 8y old oc_mounts issue | Robin Appelman | 2024-08-02 | 1 | -114/+0 | |
|/ | | | | Signed-off-by: Robin Appelman <robin@icewind.nl> | |||||
* | chore: Remove deprecated legacy search backend | Julius Härtl | 2024-08-01 | 1 | -2/+0 | |
| | | | | Signed-off-by: Julius Härtl <jus@bitgrid.net> | |||||
* | Merge pull request #46476 from nextcloud/enh/noid/migration-attributes | Stephan Orbaugh | 2024-07-30 | 2 | -4/+386 | |
|\ | | | | | Migration Attributes | |||||
| * | feat(migration-attributes): tests | Maxence Lange | 2024-07-29 | 2 | -4/+386 | |
| | | | | | | Signed-off-by: Maxence Lange <maxence@artificial-owl.com> | |||||
* | | feat(log): Allow to combine log.conditions to only log (app&user) | Joas Schilling | 2024-07-30 | 1 | -0/+90 | |
| | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com> | |||||
* | | Merge pull request #46379 from nextcloud/fix/folder-search-owner | Ferdinand Thiessen | 2024-07-30 | 1 | -3/+11 | |
|\ \ | |/ |/| | fix: `OCP\Files\Node\Folder::search` was not setting the owner | |||||
| * | fix: `OCP\Files\Node\Folder::search` was not setting the owner | Ferdinand Thiessen | 2024-07-11 | 1 | -3/+11 | |
| | | | | | | | | | | | | The owner was not set on the file info causing e.g. webdav searches to never return the known owner. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> | |||||
* | | Merge pull request #46760 from nextcloud/fix/appframework/csrf-custom-header | John Molakvoæ | 2024-07-27 | 1 | -0/+20 | |
|\ \ | ||||||
| * | | fix(AppFramework): Allow requests with OCS-APIRequest header to pass CSRF checks | provokateurin | 2024-07-25 | 1 | -0/+20 | |
| | | | | | | | | | | | | Signed-off-by: provokateurin <kate@provokateurin.de> | |||||
* | | | Merge pull request #46672 from nextcloud/fix/preview-invalid-id | Andy Scherzinger | 2024-07-25 | 1 | -0/+1 | |
|\ \ \ | |/ / |/| | | Avoid using partial file info as valid one | |||||
| * | | fix: Ignore preview requests for invalid file ids | Julius Härtl | 2024-07-22 | 1 | -0/+1 | |
| | | | | | | | | | | | | Signed-off-by: Julius Härtl <jus@bitgrid.net> | |||||
* | | | feat(TaskProcessing): Implement enums and default values | Marcel Klehr | 2024-07-25 | 1 | -0/+96 | |
| | | | | | | | | | | | | Signed-off-by: Marcel Klehr <mklehr@gmx.net> | |||||
* | | | Merge pull request #46644 from nextcloud/cast-bigint | Ferdinand Thiessen | 2024-07-24 | 1 | -1/+3 | |
|\ \ \ | | | | | | | | | fix: cast to bigint on postgresql | |||||
| * | | | fix: cast to bigint on postgresql | Robin Appelman | 2024-07-23 | 1 | -1/+3 | |
| |/ / | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl> | |||||
* | | | Merge pull request #46418 from nextcloud/artonge/feat/user_admin_delegation | Louis | 2024-07-24 | 1 | -8/+6 | |
|\ \ \ | | | | | | | | | feat(users): Add users and group management to admin delegation | |||||
| * | | | feat(users): Add support for admin delegation for users and groups management | Louis Chemineau | 2024-07-22 | 1 | -8/+6 | |
| |/ / | | | | | | | | | | Signed-off-by: Louis Chemineau <louis@chmn.me> | |||||
* / / | feat: mail provider backend | SebastianKrupinski | 2024-07-23 | 4 | -0/+469 | |
|/ / | | | | | | | Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com> | |||||
* | | feat(taskprocessing): add support for webhooks (http or AppAPI) in the task ↵ | Julien Veyssier | 2024-07-22 | 1 | -0/+4 | |
| | | | | | | | | | | | | processing API Signed-off-by: Julien Veyssier <julien-nc@posteo.net> | |||||
* | | Merge pull request #46571 from nextcloud/chore/migrate-to-filenamevalidator | Stephan Orbaugh | 2024-07-22 | 1 | -9/+6 | |
|\ \ | | | | | | | refactor: Migrate some legacy and core functions to `IFilenameValidator` | |||||
| * | | refactor: Migrate some legacy and core functions to `IFilenameValidator` | Ferdinand Thiessen | 2024-07-19 | 1 | -9/+6 | |
| | | | | | | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> | |||||
* | | | Merge pull request #46473 from nextcloud/feat/restrict_admin_to_ips | Andy Scherzinger | 2024-07-22 | 3 | -32/+118 | |
|\ \ \ | |/ / |/| | | feat(security): restrict admin actions to IP ranges | |||||
| * | | feat(security): Add public API to allow validating IP Ranges and checking ↵ | Joas Schilling | 2024-07-19 | 3 | -18/+21 | |
| | | | | | | | | | | | | | | | | | | | | | for "in range" Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com> | |||||
| * | | feat(security): restrict admin actions to IP ranges | Benjamin Gaussorgues | 2024-07-19 | 3 | -32/+115 | |
| | | | | | | | | | | | | Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com> | |||||
* | | | Merge pull request #46605 from nextcloud/bugfix/noid/test-more-oracle-versions | Joas Schilling | 2024-07-19 | 7 | -22/+21 | |
|\ \ \ | |/ / |/| | | fix(deps): Deprecate functionality deprecated by doctrine and test on more oracle versions | |||||
| * | | fix(test): Make the test less flaky | Joas Schilling | 2024-07-19 | 1 | -0/+1 | |
| | | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com> | |||||
| * | | fix(db): Deprecate `IExpressionBuilder::or()` and ↵ | Joas Schilling | 2024-07-19 | 1 | -1/+6 | |
| | | | | | | | | | | | | | | | | | | `IExpressionBuilder::and()` without parameters Signed-off-by: Joas Schilling <coding@schilljs.com> | |||||
| * | | fix(db): Promote the use of `getDatabaseProvider` to reduce the impage of ↵ | Joas Schilling | 2024-07-19 | 5 | -20/+13 | |
| | | | | | | | | | | | | | | | | | | removed upstream platforms Signed-off-by: Joas Schilling <coding@schilljs.com> | |||||
| * | | fix(db): Use `createSchemaManager()` method as `getSchemaManager()` is ↵ | Joas Schilling | 2024-07-19 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | | | deprecated Signed-off-by: Joas Schilling <coding@schilljs.com> | |||||
* | | | Merge pull request #46368 from nextcloud/fix/task-processing | Marcel Klehr | 2024-07-19 | 1 | -10/+73 | |
|\ \ \ | |/ / |/| | | TaskProcessing follow-up | |||||
| * | | fix(TaskProcessing): Run cs:fix | Marcel Klehr | 2024-07-17 | 1 | -1/+0 | |
| | | | | | | | | | | | | Signed-off-by: Marcel Klehr <mklehr@gmx.net> | |||||
| * | | fix(TaskProcessing): fix tests | Marcel Klehr | 2024-07-17 | 1 | -9/+21 | |
| | | | | | | | | | | | | Signed-off-by: Marcel Klehr <mklehr@gmx.net> | |||||
| * | | test(TaskProcessing): Add test for setTaskResult with fileIds | Marcel Klehr | 2024-07-17 | 1 | -0/+52 | |
| | | | | | | | | | | | | Signed-off-by: Marcel Klehr <mklehr@gmx.net> | |||||
* | | | Merge pull request #46583 from nextcloud/filecache-sharding-compat | Robin Appelman | 2024-07-19 | 2 | -23/+34 | |
|\ \ \ | | | | | | | | | Make filecache queries compatible with sharding | |||||
| * | | | fix: make batch propagator work with sharding restrictions | Robin Appelman | 2024-07-17 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl> | |||||
| * | | | fix: make usermountcache compatible with sharding | Robin Appelman | 2024-07-17 | 1 | -22/+33 | |
| |/ / | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl> |