MichaIng
dcbf8fa8e3
Harden data protection .htaccess
...
+ Set "Satisfy All" whenever available, as well on Apache 2.4+. This is required to override possible "Satisfy Any" on parent dir, which otherwise would allow direct access to data, regardless of "Require" directive.
+ Set "Deny from all" as well whenever available, to block access regardless of which access control directive takes priority.
+ Assume Apache 2.2 only, if mod_authz_core and mod_access_compat are both not available, to avoid doubled directives. In this case set "Deny from all" directive only if the providing mod_authz_host module is available. "Satisfy" is a core directive on Apache 2.2.
+ Update Apache version strings. Regarding the used directives/modules, Apache 2.4 and 2.5 behave the same.
+ Add ordering spaces to better reflect the nested directives and to match style of other .htaccess files.
Fixes: https://github.com/nextcloud/server/issues/6449
Signed-off-by: Micha Felle <micha@dietpi.com>
2019-08-19 15:09:44 +02:00
Roeland Jago Douma
b73df01945
Merge pull request #16781 from nextcloud/bug/fix-password-reset
...
Send new password instead of empty string
2019-08-19 11:52:58 +02:00
Roeland Jago Douma
0b0cdeb8f5
Merge pull request #16779 from nextcloud/dependabot/npm_and_yarn/css-vars-ponyfill-2.1.1
...
Bump css-vars-ponyfill from 2.0.2 to 2.1.1
2019-08-19 09:48:19 +02:00
Julius Härtl
c2f039fe28
Update bundles
...
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2019-08-19 09:37:29 +02:00
Julius Härtl
273cd3870d
Force proper action for login form
...
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2019-08-19 09:32:13 +02:00
Daniel Kesselberg
6094c9dc39
Send new password instead of empty string
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2019-08-19 09:32:09 +02:00
Roeland Jago Douma
e6c225a3f3
Merge pull request #16766 from nextcloud/fix/frame-src/no-nonce
...
frame-src doesn't respect the nonce attribute
2019-08-19 09:22:31 +02:00
Roeland Jago Douma
8514a2a436
Merge pull request #16784 from nextcloud/bugfix/noid/fix_foreach_valarm_error
...
fix foreach error for reminder generator
2019-08-19 09:20:08 +02:00
Nextcloud bot
6725ad213f
[tx-robot] updated from transifex
2019-08-19 02:14:56 +00:00
dependabot-preview[bot]
6e79ccda7f
Bump css-vars-ponyfill from 2.0.2 to 2.1.1
...
Bumps [css-vars-ponyfill](https://github.com/jhildenbiddle/css-vars-ponyfill ) from 2.0.2 to 2.1.1.
- [Release notes](https://github.com/jhildenbiddle/css-vars-ponyfill/releases )
- [Changelog](https://github.com/jhildenbiddle/css-vars-ponyfill/blob/master/CHANGELOG.md )
- [Commits](https://github.com/jhildenbiddle/css-vars-ponyfill/commits )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>
2019-08-18 20:01:52 +00:00
Georg Ehrke
6f66fba559
fix foreach error for reminder generator
...
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-18 20:56:57 +02:00
Roeland Jago Douma
08a61f3373
Merge pull request #16756 from nextcloud/allow-context-subclasses-in-acceptance-tests-to-access-parent-actor
...
Allow Context subclasses in acceptance tests to access parent actor
2019-08-18 20:20:16 +02:00
Roeland Jago Douma
489fd4c3a0
Merge pull request #16778 from nextcloud/dependabot/npm_and_yarn/webpack-4.39.2
...
Bump webpack from 4.39.1 to 4.39.2
2019-08-18 20:14:24 +02:00
dependabot-preview[bot]
20a83bed16
Bump webpack from 4.39.1 to 4.39.2
...
Bumps [webpack](https://github.com/webpack/webpack ) from 4.39.1 to 4.39.2.
- [Release notes](https://github.com/webpack/webpack/releases )
- [Commits](https://github.com/webpack/webpack/compare/v4.39.1...v4.39.2 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>
2019-08-18 14:22:01 +00:00
Nextcloud bot
b3880452bb
[tx-robot] updated from transifex
2019-08-18 02:15:40 +00:00
Nextcloud bot
5b09460d4f
[tx-robot] updated from transifex
2019-08-17 02:15:00 +00:00
Roeland Jago Douma
c4cafae884
frame-src doesn't respect the nonce attribute
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-08-16 21:29:57 +02:00
Daniel Calviño Sánchez
e5a305b9d8
Allow Context subclasses in acceptance tests to access parent actor
...
Although uncommon, in some cases a Context may need to be extended (for
example, to override a step defined in the server with a specific
behaviour in the acceptance tests of an app); in those cases the
subclass should be able to access the actor attribute defined in the
Context it is extending.
Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
2019-08-16 08:20:41 +02:00
Nextcloud bot
6db355848b
[tx-robot] updated from transifex
2019-08-16 02:14:16 +00:00
Roeland Jago Douma
f7fa2f8100
Merge pull request #16408 from nextcloud/version/noid/17.0.0beta1
...
17.0.0 Beta 1
2019-08-15 21:26:53 +02:00
Roeland Jago Douma
6ef7ba2000
Merge pull request #3044 from nextcloud/dav-email-reminders
...
Calendar events email reminders
2019-08-15 21:21:11 +02:00
Roeland Jago Douma
9c2d70125a
Merge pull request #16507 from nextcloud/bugfix/15416/update_autodisabled_apps
...
Fix tracking of auto disabled apps in Updater
2019-08-15 20:08:58 +02:00
Georg Ehrke
4d28a4544e
Final fixes
...
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:05:01 +02:00
Georg Ehrke
2d6473e79b
Add repair step to register reminder index for existing events
...
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:03:54 +02:00
Georg Ehrke
bcce568c6d
Support recurring events + repeating alarms
...
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:03:51 +02:00
Georg Ehrke
7c4a8a3bdf
Provide a fake AudioProvider that is basically the same as PushProvider, better then not showing reminders at all for now
...
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:02:56 +02:00
Georg Ehrke
c5147529af
Stop using deprecated registerNotifier, use registerNotifierService instead
...
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:02:56 +02:00
Georg Ehrke
a6f792616c
Implement getID and getName in Reminder/Notifier as required since Nextcloud 17
...
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:02:56 +02:00
Georg Ehrke
11fa45196e
smaller syntax changes to CalDAV reminder classes
...
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:02:56 +02:00
Georg Ehrke
36b9b51297
run send reminders background-job only when mode is not set to occ
...
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:02:56 +02:00
Georg Ehrke
d74315ac3d
add occ dav:send-event-reminders, so you don't have to rely on the background-job
...
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:02:56 +02:00
Thomas Citharel
7bddcc091d
Support event reminders (email and notifications)
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2019-08-15 20:02:56 +02:00
Roeland Jago Douma
f452e23a7d
Merge pull request #16666 from nextcloud/feature/calendar/delegation
...
Feature/calendar/delegation
2019-08-15 19:30:45 +02:00
Georg Ehrke
63d584afb5
use principaluri instead of userid, allowing to add delegates for rooms and things
...
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
!fixup add owner_id and proxy_id as db index, since we use it for querying
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
!fixup don't add ACL for each individual proxy, just use calendar-proxy groups
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
!fixup allow delegation of resources / rooms
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
!fixup fix addIndex call in migration
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
!fixup fix remaining constructor calls of Principal
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
!fixup minor fixes and unit tests
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 15:41:28 +02:00
Roeland Jago Douma
3d86537dc9
Early first stage implementation of the groupset
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-08-15 15:41:27 +02:00
Roeland Jago Douma
01a4644cad
Use the proxymapper to obtain valid proxy data
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-08-15 15:41:27 +02:00
Joas Schilling
810ee7d811
Make the auto-disabled list more broad
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2019-08-15 11:12:45 +02:00
Georg Ehrke
f6c3424039
Fix tracking of auto disabled apps in Updater
...
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 11:12:43 +02:00
Roeland Jago Douma
465e919de1
Merge pull request #16154 from nextcloud/fix/noid/accessibility-focusable-viewtoggle
...
Make possible to focus grid/list view toggle via keyboard
2019-08-15 10:56:52 +02:00
Roeland Jago Douma
d14aed1048
Merge pull request #15946 from martink-p/bugxfix/9792/encrypted-external-webdav
...
Update Encryption.php
2019-08-15 10:22:50 +02:00
John Molakvoæ
0185aafbcc
Rename delete label to Delete folder/file ( #16741 )
...
Rename delete label to Delete folder/file
2019-08-15 10:20:20 +02:00
Roeland Jago Douma
954290ab5f
Merge pull request #12392 from brad2014/feature/properly-present-buttons-from-imip-mails
...
Customize presentation of accept/decline buttons in iMip mail
2019-08-15 08:17:30 +02:00
Nextcloud bot
fdcc654ff6
[tx-robot] updated from transifex
2019-08-15 02:14:35 +00:00
John Molakvoæ
76c004b857
Reset and init new user form language ( #16727 )
...
Reset and init new user form language
2019-08-14 20:58:18 +02:00
Roeland Jago Douma
c6e4679470
Merge pull request #16739 from nextcloud/office/head
...
Fix opening office documents from webdav network mounts on windows
2019-08-14 20:11:35 +02:00
John Molakvoæ (skjnldsv)
3e1fd602eb
Rename delete label to Delete folder/file
...
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2019-08-14 18:28:46 +02:00
John Molakvoæ (skjnldsv)
cbc3862830
Always put the gridview toggle on the visible part of the page
...
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2019-08-14 16:45:58 +02:00
Roeland Jago Douma
d013ff6cae
Merge pull request #16663 from JakubOnderka/patch-2
...
files_trashbin: File can be without extension
2019-08-14 10:29:53 +02:00
Julius Härtl
fea04ef2df
Return proper responses when office is requesting OPTIONS/HEAD with empty Bearer header
...
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2019-08-14 10:15:45 +02:00
Roeland Jago Douma
f7152cccb2
Merge pull request #16572 from nextcloud/fix/15613/bring-back-psql9-compat
...
instead of upsert query, fallback to default on PSQL <= 9.4
2019-08-14 10:10:37 +02:00