wbrawner/server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
50625 commits 157 branches 562 tags 714 MiB
Commit graph

17055 commits

Author SHA1 Message Date
Joas Schilling
b130a4c8fb
Make the sharing constants publicly available 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2019-08-23 13:54:19 +02:00
Nextcloud bot
182517e0b3
[tx-robot] updated from transifex 2019-08-22 02:14:34 +00:00
Roeland Jago Douma
1e74ffd46b
Merge pull request #16820 from nextcloud/bugfix/noid/access-handling-of-projects 
Change access handling of projects
 2019-08-21 22:02:50 +02:00
blizzz
9ac15bc4e9
Merge pull request #16813 from compagnon/fix/noid/AutoloadNotAllowedException-theming-off 
autoloader.php could raise Not AllowedException
 2019-08-21 16:04:32 +02:00
Joas Schilling
69f2974706
Only trigger the events with tags that where actually assigned 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2019-08-21 11:58:27 +02:00
Joas Schilling
23bd4c127d
Add a repair step to clear the projects access cache 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2019-08-21 09:16:14 +02:00
Joas Schilling
b53283fcb7
Change the logic so projects are only shown when you can access all resources 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2019-08-21 09:16:14 +02:00
John Molakvoæ (skjnldsv)
b557f52c22
Add expiration event for shares 
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
 2019-08-21 08:30:17 +02:00
Roeland Jago Douma
dd02920aed
Merge pull request #16811 from nextcloud/bugfix/16771/correctly-remove-apps-without-any-releases 
Correctly remove apps without any releases
 2019-08-20 22:29:20 +02:00
Roeland Jago Douma
1dda6fb05b
Merge pull request #16812 from nextcloud/bugfix/noid/previewv1-returntype 
Explicit cast for ProviderV1Adapter
 2019-08-20 22:28:43 +02:00
Guillaume COMPAGNON
0516675a5c autoloader.php could raise Not AllowedException 
when theming is off

Signed-off-by: Guillaume Compagnon <gcompagnon@outlook.com>

	modified:   lib/private/TemplateLayout.php
 2019-08-20 17:11:40 +02:00
Julius Härtl
d3d37aa19d
Explicit cast for ProviderV1Adapter 
Signed-off-by: Julius Härtl <jus@bitgrid.net>
 2019-08-20 15:47:59 +02:00
Joas Schilling
17096adff9
Correctly remove apps without any releases 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2019-08-20 14:47:46 +02:00
Joas Schilling
323642454a
Undefined variable response when server is no nextcloud anymore 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2019-08-20 12:54:58 +02:00
Joas Schilling
650e4f9f4c
Merge pull request #16793 from nextcloud/bugfix/noid/filter-more-configs 
Filter more configs
 2019-08-20 09:01:20 +02:00
Nextcloud bot
ddec3fc416
[tx-robot] updated from transifex 2019-08-20 02:14:48 +00:00
Roeland Jago Douma
1614dee6dc
Codechecker: removed unused use 
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-08-19 19:41:46 +02:00
Roeland Jago Douma
7927aebdeb
Fix report of phpstan in Limiter 
* unneeded arguments to constructor
* added return types
* let automatic DI do its work

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-08-19 19:38:43 +02:00
Joas Schilling
b6c78eb9d4
Filter more configs 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2019-08-19 16:32:20 +02:00
Roeland Jago Douma
c40fe8b819
Do not enforce the parent constructor of response to be called 
If there is no policy set we just take the default empty ones.
That way no obscure errors get thrown if the constructor is not called.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-08-19 14:39:34 +02:00
Roeland Jago Douma
e6c225a3f3
Merge pull request #16766 from nextcloud/fix/frame-src/no-nonce 
frame-src doesn't respect the nonce attribute
 2019-08-19 09:22:31 +02:00
Nextcloud bot
6725ad213f
[tx-robot] updated from transifex 2019-08-19 02:14:56 +00:00
Nextcloud bot
b3880452bb
[tx-robot] updated from transifex 2019-08-18 02:15:40 +00:00
Nextcloud bot
5b09460d4f
[tx-robot] updated from transifex 2019-08-17 02:15:00 +00:00
Roeland Jago Douma
c4cafae884
frame-src doesn't respect the nonce attribute 
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-08-16 21:29:57 +02:00
Joas Schilling
810ee7d811
Make the auto-disabled list more broad 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2019-08-15 11:12:45 +02:00
Georg Ehrke
f6c3424039
Fix tracking of auto disabled apps in Updater 
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
 2019-08-15 11:12:43 +02:00
Roeland Jago Douma
d14aed1048
Merge pull request #15946 from martink-p/bugxfix/9792/encrypted-external-webdav 
Update Encryption.php
 2019-08-15 10:22:50 +02:00
Nextcloud bot
fdcc654ff6
[tx-robot] updated from transifex 2019-08-15 02:14:35 +00:00
Roeland Jago Douma
f7152cccb2
Merge pull request #16572 from nextcloud/fix/15613/bring-back-psql9-compat 
instead of upsert query, fallback to default on PSQL <= 9.4
 2019-08-14 10:10:37 +02:00
blizzz
2ac01c0203
Merge pull request #16725 from nextcloud/bugfix/noid/syslog-di 
Fix loading of the syslog logging class
 2019-08-14 09:46:48 +02:00
Arthur Schiwon
d0409548c6
instead of upsert, fallback to default query on PgSQL <= 9.4 
because there is no upsert yet

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
 2019-08-14 09:05:11 +02:00
Julius Härtl
2efb9a7d90
Make sure SystemConfig class can be injected and syslog_tag is fetched properly 
Signed-off-by: Julius Härtl <jus@bitgrid.net>
 2019-08-13 16:26:18 +02:00
Roeland Jago Douma
145eee91fe
Get the proper UID 
Some user backends (like the database backend) allow us to obtain a user
case insensitive. However the UID itself is case sensitive.

Example:
* create a user User1
* login as User1
  - This results the data/User1 folder to be created etc
* now have some code somewhere that obtains the userFolder (from
IRootFolder) but pas in 'uSER1' as uid
  - The code will check if that is a valid user. And in this case it is
  since User1 and uSER1 both map to the same user
  - However the the UID in the user object is used for the folder a new
  folder fill be create data/uSER1

With this PR this is avoided now. Since we obtain the real UID casing in
the backend before creating the user object.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-08-13 09:33:46 +02:00
Roeland Jago Douma
f465f9d4b9
Merge pull request #16721 from nextcloud/fix/16644 
Correctly handle emtpy string in proxyuserpwd config
 2019-08-11 22:46:01 +02:00
Roeland Jago Douma
9d6eb2daf7
Merge pull request #16179 from J0WI/mv-frameoptions 
Add X-Frame-Options header to .htaccess
 2019-08-11 21:30:51 +02:00
Scott Shambarger
edf946dfc7
Correctly handle emtpy string in proxyuserpwd config 
As documented, the default value for config value proxyuserpwd is ''.
However, that value results in the error:
 "cURL error 5: Unsupported proxy syntax in '@'".
This patch handles the values of '' and null (the default in the code)
the same for config values proxyuserpwd and proxy.

Signed-off-by: Scott Shambarger <devel@shambarger.net>
 2019-08-11 21:07:30 +02:00
J0WI
1b074f48d8
Remove duplicated spaces 
Signed-off-by: J0WI <J0WI@users.noreply.github.com>
 2019-08-11 20:11:50 +02:00
J0WI
3f2932c75a
Sort headers 
Signed-off-by: J0WI <J0WI@users.noreply.github.com>
 2019-08-11 20:11:50 +02:00
J0WI
76cbd7db6e
Add X-Frame-Options header to .htaccess 
Signed-off-by: J0WI <J0WI@users.noreply.github.com>
 2019-08-11 20:11:49 +02:00
Roeland Jago Douma
773ce9e58f
Merge pull request #16613 from nextcloud/enh/featurepolicy 
Add Feature-Policy header
 2019-08-11 10:16:58 +02:00
Roeland Jago Douma
b8c5008acf
Add feature policy header 
This adds the events and the classes to modify the feature policy.
It also adds a default restricted feature policy.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-08-10 14:26:22 +02:00
Nextcloud bot
11cf253f52
[tx-robot] updated from transifex 2019-08-10 02:14:48 +00:00
Nextcloud bot
cb83d0646a
[tx-robot] updated from transifex 2019-08-09 02:14:15 +00:00
Roeland Jago Douma
5d94590cee
Have the OCSBaseResponse call the parent constructor 
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-08-08 09:52:20 +02:00
Roeland Jago Douma
b42b26eceb
Merge pull request #15187 from vitormattos/bugfix-create-database-user 
Bugfix: user is not allowed
 2019-08-08 09:03:48 +02:00
Roeland Jago Douma
6b11862611
Merge pull request #16686 from nextcloud/fix/16684/return_int_getIf 
Properly return an int in the getId function of the cache
 2019-08-08 08:14:21 +02:00
Nextcloud bot
00c1389628
[tx-robot] updated from transifex 2019-08-08 02:14:43 +00:00
Roeland Jago Douma
650927a822
Properly return an int in the getId function of the cache 
fixes #16684

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-08-07 20:38:42 +02:00
Nextcloud bot
52f24b50f5
[tx-robot] updated from transifex 2019-08-07 02:14:38 +00:00
Nextcloud bot
effca30d10
[tx-robot] updated from transifex 2019-08-06 02:14:36 +00:00
Morris Jobke
1d72073e34
Merge pull request #16498 from nextcloud/feature/noid/room_metadata 
Allow calendar resources/rooms to provide metadata
 2019-08-05 14:52:45 +02:00
Roeland Jago Douma
7b0e11f709
Merge pull request #16639 from nextcloud/feature/noid/new-types 
Adding comparaison types: +regex +wildcard (fulltextsearch)
 2019-08-05 14:21:12 +02:00
Nextcloud bot
9cf2e84d13
[tx-robot] updated from transifex 2019-08-05 02:14:26 +00:00
Nextcloud bot
4327d275c1
[tx-robot] updated from transifex 2019-08-04 02:15:22 +00:00
Georg Ehrke
3e5946bd0d
Add standard metadata key for room-features 
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
 2019-08-02 20:01:32 +02:00
Maxence Lange
f10e525e0c comparaison types: +regex +wildcard 
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
 2019-08-02 12:24:32 -01:00
Nextcloud bot
67f90cb682
[tx-robot] updated from transifex 2019-08-02 02:14:30 +00:00
Georg Ehrke
b246e58a1e
Provide standard metadata keys for contact person of a resource 
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
 2019-08-01 15:26:11 +02:00
Georg Ehrke
475984ef19
Provide standard metadata keys for location of room 
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
 2019-08-01 15:25:43 +02:00
Roeland Jago Douma
2e2d1b6b5c
Merge pull request #16592 from nextcloud/bugfix/noid/federated-reshare 
Fix permission check on incoming federated shares
 2019-08-01 10:55:35 +02:00
Georg Ehrke
ca060a2a83
sync metadata of rooms / resources with cache 
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
 2019-08-01 10:08:56 +02:00
Georg Ehrke
2dc79e5839
Add \OCP\Calendar\IMetadataProvider interface and provider for common metadata keys 
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
 2019-08-01 10:08:52 +02:00
Nextcloud bot
a1afdac31a
[tx-robot] updated from transifex 2019-08-01 02:15:27 +00:00
Roeland Jago Douma
f94ee72507
Add form-action CSP element 
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-07-31 15:16:10 +02:00
Julius Härtl
22b81ac1e4
Fix permission check on incoming federated shares 
Since federated shares have their permissions set on the node, we do not need
to check for parent share permissions. Otherwise reshares of incoming federated
have no permission variable defined and creating them will fail

Signed-off-by: Julius Härtl <jus@bitgrid.net>
 2019-07-31 12:59:51 +02:00
Roeland Jago Douma
1d8b09aa86
Merge pull request #16616 from nextcloud/dep/setEvalScript 
setting unsafe-eval is deprecated
 2019-07-31 11:01:38 +02:00
Nextcloud bot
3f8f0f7609
[tx-robot] updated from transifex 2019-07-31 02:16:00 +00:00
Roeland Jago Douma
417fbb5d60
setting unsafe-eval is deprecated 
This will be removed in a future version of Nextcloud.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-07-30 16:27:38 +02:00
Joas Schilling
d4eb8481fa
Merge pull request #16594 from nextcloud/tech-debt/noid/remove-unused-checkPasswordProtectedShare 
Remove unused OC\Share\Share::checkPasswordProtectedShare
 2019-07-30 09:58:38 +02:00
Roeland Jago Douma
135209f24e
Merge pull request #16579 from nextcloud/enh/PostLoginEvent 
Add proper PostLoginEvent
 2019-07-30 08:54:10 +02:00
Nextcloud bot
74eb2894a7
[tx-robot] updated from transifex 2019-07-30 02:14:45 +00:00
Morris Jobke
e21f440990
Merge pull request #16502 from nextcloud/bugfix/16474 
Check the if we can actually access the storage cache for recent files
 2019-07-29 16:59:26 +02:00
Roeland Jago Douma
ba60fafb9a
Add proper PostLoginEvent 
This can be used by othr mechanisms to listen for this event in a lazy
fashion.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-07-29 16:31:40 +02:00
Morris Jobke
98237d2a00
Remove unused OC\Share\Share::checkPasswordProtectedShare 
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
 2019-07-29 15:23:21 +02:00
Morris Jobke
e45fb5fa3e
Fix typo in comment 
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
 2019-07-29 14:55:43 +02:00
Roeland Jago Douma
51197ac622
Merge pull request #16582 from nextcloud/enh/split_up_security_middleware 
Split up security middleware
 2019-07-29 12:13:55 +02:00
Morris Jobke
ec7e837d6a
Merge pull request #16563 from nextcloud/enh/lostcontroller/better_exceptions 
Use proper exception in lostController
 2019-07-29 10:42:36 +02:00
Roeland Jago Douma
173d95c904
Merge pull request #16581 from nextcloud/dep/strict_csps_can_go 
No need to have these classes we tighten the default CSP from time to time
 2019-07-29 10:40:38 +02:00
Roeland Jago Douma
fb78cd3ed8
Merge pull request #16570 from nextcloud/enh/supress_touch_error 
Supress warnings touch can generate
 2019-07-29 10:39:46 +02:00
Nextcloud bot
57f2ea22c7
[tx-robot] updated from transifex 2019-07-29 02:14:59 +00:00
Nextcloud bot
b481750d00
[tx-robot] updated from transifex 2019-07-28 02:15:26 +00:00
Roeland Jago Douma
b6dd2ebd39
Use proper exception in lostController 
There is no need to log the expcetion of most of the stuff here.
We should properly log them but an exception is excessive.

This moves it to a proper exception which we can catch and then log.
The other exceptions will still be fully logged.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-07-27 20:12:16 +02:00
Roeland Jago Douma
37a4282c7a
Split up security middleware 
With upcoming work for the feature policy header. Splitting this in
smaller classes that just do 1 thing makes sense.

I rather have a few small classes that are tiny and do 1 thing right
(and we all understand what is going on) than have big ones.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-07-27 16:11:45 +02:00
Roeland Jago Douma
cd243b0876
No need to have these classes we tighten the default CSP from time to 
time

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-07-27 14:59:48 +02:00
Roeland Jago Douma
9ef23e2362
Merge pull request #16558 from nextcloud/enh/less_verbose_locked_logging 
Do not log all locked exceptions
 2019-07-27 10:39:11 +02:00
Nextcloud bot
2827b0ba31
[tx-robot] updated from transifex 2019-07-27 02:14:37 +00:00
Roeland Jago Douma
1cc8a2f5d2
Supress warnings touch can generate 
We already catch the result value. Having the warning being logged
explicitly doesn't help and polutes the log.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-07-26 17:26:59 +02:00
Morris Jobke
2e803dc3d3
Merge pull request #16555 from nextcloud/fix/16529/mask-keys 
use a pattern to identify sensitive config keys
 2019-07-26 15:15:56 +02:00
Roeland Jago Douma
cdc43cd39b
Merge pull request #16456 from nextcloud/dep/searchByTag 
Remove deprecated searchByTag
 2019-07-26 15:07:04 +02:00
Roeland Jago Douma
4cc41cb4c7
Do not log all locked exceptions 
This can happen for valid reasons (multiple users writing at the same
time) with for example the text app. Apps should properly handle it. No
reason to log it by default.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-07-26 14:55:13 +02:00
Arthur Schiwon
78201bcb72
treat sensitive config keys by pattern 
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
 2019-07-26 13:31:14 +02:00
Roeland Jago Douma
323f40a493
Merge pull request #16461 from nextcloud/fix/noid/pgsql-version 
fixes the check for postgresql
 2019-07-26 12:32:04 +02:00
Roeland Jago Douma
0487144b26
Remove deprecated searchByTag 
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
 2019-07-26 12:29:19 +02:00
Nextcloud bot
0e54f59b24
[tx-robot] updated from transifex 2019-07-26 02:14:42 +00:00
Nextcloud bot
569cf31cd6
[tx-robot] updated from transifex 2019-07-25 02:14:40 +00:00
Julius Härtl
e43b341b04
Add additional check for read permissions 
Signed-off-by: Julius Härtl <jus@bitgrid.net>
 2019-07-24 14:01:24 +02:00
Julius Härtl
3674f6fa2d
Check the if we can actually access the storage cache for recent files 
Signed-off-by: Julius Härtl <jus@bitgrid.net>
 2019-07-24 14:01:24 +02:00
Joas Schilling
7d3a349d8f
PHPStorm code cleanup 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2019-07-24 10:39:57 +02:00
Joas Schilling
3b334169a8
Get the topmost parent for the parent instead of doing endless recursion 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2019-07-24 10:39:22 +02:00