Commit graph

50303 commits

Author SHA1 Message Date
MichaIng
dcbf8fa8e3
Harden data protection .htaccess
+ Set "Satisfy All" whenever available, as well on Apache 2.4+. This is required to override possible "Satisfy Any" on parent dir, which otherwise would allow direct access to data, regardless of "Require" directive.
+ Set "Deny from all" as well whenever available, to block access regardless of which access control directive takes priority.
+ Assume Apache 2.2 only, if mod_authz_core and mod_access_compat are both not available, to avoid doubled directives. In this case set "Deny from all" directive only if the providing mod_authz_host module is available. "Satisfy" is a core directive on Apache 2.2.
+ Update Apache version strings. Regarding the used directives/modules, Apache 2.4 and 2.5 behave the same.
+ Add ordering spaces to better reflect the nested directives and to match style of other .htaccess files.

Fixes: https://github.com/nextcloud/server/issues/6449

Signed-off-by: Micha Felle <micha@dietpi.com>
2019-08-19 15:09:44 +02:00
Roeland Jago Douma
b73df01945
Merge pull request #16781 from nextcloud/bug/fix-password-reset
Send new password instead of empty string
2019-08-19 11:52:58 +02:00
Roeland Jago Douma
0b0cdeb8f5
Merge pull request #16779 from nextcloud/dependabot/npm_and_yarn/css-vars-ponyfill-2.1.1
Bump css-vars-ponyfill from 2.0.2 to 2.1.1
2019-08-19 09:48:19 +02:00
Julius Härtl
c2f039fe28
Update bundles
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2019-08-19 09:37:29 +02:00
Julius Härtl
273cd3870d
Force proper action for login form
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2019-08-19 09:32:13 +02:00
Daniel Kesselberg
6094c9dc39
Send new password instead of empty string
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2019-08-19 09:32:09 +02:00
Roeland Jago Douma
e6c225a3f3
Merge pull request #16766 from nextcloud/fix/frame-src/no-nonce
frame-src doesn't respect the nonce attribute
2019-08-19 09:22:31 +02:00
Roeland Jago Douma
8514a2a436
Merge pull request #16784 from nextcloud/bugfix/noid/fix_foreach_valarm_error
fix foreach error for reminder generator
2019-08-19 09:20:08 +02:00
Nextcloud bot
6725ad213f
[tx-robot] updated from transifex 2019-08-19 02:14:56 +00:00
dependabot-preview[bot]
6e79ccda7f Bump css-vars-ponyfill from 2.0.2 to 2.1.1
Bumps [css-vars-ponyfill](https://github.com/jhildenbiddle/css-vars-ponyfill) from 2.0.2 to 2.1.1.
- [Release notes](https://github.com/jhildenbiddle/css-vars-ponyfill/releases)
- [Changelog](https://github.com/jhildenbiddle/css-vars-ponyfill/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jhildenbiddle/css-vars-ponyfill/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>
2019-08-18 20:01:52 +00:00
Georg Ehrke
6f66fba559
fix foreach error for reminder generator
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-18 20:56:57 +02:00
Roeland Jago Douma
08a61f3373
Merge pull request #16756 from nextcloud/allow-context-subclasses-in-acceptance-tests-to-access-parent-actor
Allow Context subclasses in acceptance tests to access parent actor
2019-08-18 20:20:16 +02:00
Roeland Jago Douma
489fd4c3a0
Merge pull request #16778 from nextcloud/dependabot/npm_and_yarn/webpack-4.39.2
Bump webpack from 4.39.1 to 4.39.2
2019-08-18 20:14:24 +02:00
dependabot-preview[bot]
20a83bed16 Bump webpack from 4.39.1 to 4.39.2
Bumps [webpack](https://github.com/webpack/webpack) from 4.39.1 to 4.39.2.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](https://github.com/webpack/webpack/compare/v4.39.1...v4.39.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>
2019-08-18 14:22:01 +00:00
Nextcloud bot
b3880452bb
[tx-robot] updated from transifex 2019-08-18 02:15:40 +00:00
Nextcloud bot
5b09460d4f
[tx-robot] updated from transifex 2019-08-17 02:15:00 +00:00
Roeland Jago Douma
c4cafae884
frame-src doesn't respect the nonce attribute
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-08-16 21:29:57 +02:00
Daniel Calviño Sánchez
e5a305b9d8 Allow Context subclasses in acceptance tests to access parent actor
Although uncommon, in some cases a Context may need to be extended (for
example, to override a step defined in the server with a specific
behaviour in the acceptance tests of an app); in those cases the
subclass should be able to access the actor attribute defined in the
Context it is extending.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
2019-08-16 08:20:41 +02:00
Nextcloud bot
6db355848b
[tx-robot] updated from transifex 2019-08-16 02:14:16 +00:00
Roeland Jago Douma
f7fa2f8100
Merge pull request #16408 from nextcloud/version/noid/17.0.0beta1
17.0.0 Beta 1
2019-08-15 21:26:53 +02:00
Roeland Jago Douma
6ef7ba2000
Merge pull request #3044 from nextcloud/dav-email-reminders
Calendar events email reminders
2019-08-15 21:21:11 +02:00
Roeland Jago Douma
9c2d70125a
Merge pull request #16507 from nextcloud/bugfix/15416/update_autodisabled_apps
Fix tracking of auto disabled apps in Updater
2019-08-15 20:08:58 +02:00
Georg Ehrke
4d28a4544e
Final fixes
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:05:01 +02:00
Georg Ehrke
2d6473e79b
Add repair step to register reminder index for existing events
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:03:54 +02:00
Georg Ehrke
bcce568c6d
Support recurring events + repeating alarms
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:03:51 +02:00
Georg Ehrke
7c4a8a3bdf
Provide a fake AudioProvider that is basically the same as PushProvider, better then not showing reminders at all for now
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:02:56 +02:00
Georg Ehrke
c5147529af
Stop using deprecated registerNotifier, use registerNotifierService instead
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:02:56 +02:00
Georg Ehrke
a6f792616c
Implement getID and getName in Reminder/Notifier as required since Nextcloud 17
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:02:56 +02:00
Georg Ehrke
11fa45196e
smaller syntax changes to CalDAV reminder classes
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:02:56 +02:00
Georg Ehrke
36b9b51297
run send reminders background-job only when mode is not set to occ
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:02:56 +02:00
Georg Ehrke
d74315ac3d
add occ dav:send-event-reminders, so you don't have to rely on the background-job
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 20:02:56 +02:00
Thomas Citharel
7bddcc091d
Support event reminders (email and notifications)
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2019-08-15 20:02:56 +02:00
Roeland Jago Douma
f452e23a7d
Merge pull request #16666 from nextcloud/feature/calendar/delegation
Feature/calendar/delegation
2019-08-15 19:30:45 +02:00
Georg Ehrke
63d584afb5
use principaluri instead of userid, allowing to add delegates for rooms and things
Signed-off-by: Georg Ehrke <developer@georgehrke.com>

!fixup add owner_id and proxy_id as db index, since we use it for querying

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

!fixup don't add ACL for each individual proxy, just use calendar-proxy groups

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

!fixup allow delegation of resources / rooms

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

!fixup fix addIndex call in migration

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

!fixup fix remaining constructor calls of Principal

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

!fixup minor fixes and unit tests

Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 15:41:28 +02:00
Roeland Jago Douma
3d86537dc9
Early first stage implementation of the groupset
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-08-15 15:41:27 +02:00
Roeland Jago Douma
01a4644cad
Use the proxymapper to obtain valid proxy data
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-08-15 15:41:27 +02:00
Joas Schilling
810ee7d811
Make the auto-disabled list more broad
Signed-off-by: Joas Schilling <coding@schilljs.com>
2019-08-15 11:12:45 +02:00
Georg Ehrke
f6c3424039
Fix tracking of auto disabled apps in Updater
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-08-15 11:12:43 +02:00
Roeland Jago Douma
465e919de1
Merge pull request #16154 from nextcloud/fix/noid/accessibility-focusable-viewtoggle
Make possible to focus grid/list view toggle via keyboard
2019-08-15 10:56:52 +02:00
Roeland Jago Douma
d14aed1048
Merge pull request #15946 from martink-p/bugxfix/9792/encrypted-external-webdav
Update Encryption.php
2019-08-15 10:22:50 +02:00
John Molakvoæ
0185aafbcc
Rename delete label to Delete folder/file (#16741)
Rename delete label to Delete folder/file
2019-08-15 10:20:20 +02:00
Roeland Jago Douma
954290ab5f
Merge pull request #12392 from brad2014/feature/properly-present-buttons-from-imip-mails
Customize presentation of accept/decline buttons in iMip mail
2019-08-15 08:17:30 +02:00
Nextcloud bot
fdcc654ff6
[tx-robot] updated from transifex 2019-08-15 02:14:35 +00:00
John Molakvoæ
76c004b857
Reset and init new user form language (#16727)
Reset and init new user form language
2019-08-14 20:58:18 +02:00
Roeland Jago Douma
c6e4679470
Merge pull request #16739 from nextcloud/office/head
Fix opening office documents from webdav network mounts on windows
2019-08-14 20:11:35 +02:00
John Molakvoæ (skjnldsv)
3e1fd602eb
Rename delete label to Delete folder/file
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2019-08-14 18:28:46 +02:00
John Molakvoæ (skjnldsv)
cbc3862830
Always put the gridview toggle on the visible part of the page
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2019-08-14 16:45:58 +02:00
Roeland Jago Douma
d013ff6cae
Merge pull request #16663 from JakubOnderka/patch-2
files_trashbin: File can be without extension
2019-08-14 10:29:53 +02:00
Julius Härtl
fea04ef2df
Return proper responses when office is requesting OPTIONS/HEAD with empty Bearer header
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2019-08-14 10:15:45 +02:00
Roeland Jago Douma
f7152cccb2
Merge pull request #16572 from nextcloud/fix/15613/bring-back-psql9-compat
instead of upsert query, fallback to default on PSQL <= 9.4
2019-08-14 10:10:37 +02:00