Commit Graph

56522 Commits

Author SHA1 Message Date
Nextcloud bot 2f8c2c335a
[tx-robot] updated from transifex 2021-05-20 02:28:18 +00:00
Roeland Jago Douma a8d144a35b
Merge pull request #27014 from nextcloud/backport/27000/stable20
[stable20] Harden apptoken check
2021-05-19 08:40:37 +02:00
Nextcloud bot 99788d3d06
[tx-robot] updated from transifex 2021-05-19 02:31:56 +00:00
Roeland Jago Douma 998bcd92c6 Harden apptoken check
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2021-05-18 13:10:51 +00:00
dependabot-preview[bot] 2bc106ae13
Merge pull request #26900 from nextcloud/dependabot/npm_and_yarn/stable20/handlebars-4.7.7 2021-05-18 08:16:53 +00:00
Morris Jobke da32428c3e
Merge pull request #26954 from nextcloud/backport/26879/stable20
[stable20]  Don't break OCC if an app is breaking in it's Application class
2021-05-18 09:32:22 +02:00
dependabot-preview[bot] 4122686afa [Security] Bump handlebars from 4.7.6 to 4.7.7
Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.7.6 to 4.7.7. **This update includes a security fix.**
- [Release notes](https://github.com/wycats/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md)
- [Commits](https://github.com/wycats/handlebars.js/compare/v4.7.6...v4.7.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>
2021-05-18 06:53:34 +00:00
Morris Jobke 247c576533
Merge pull request #27001 from nextcloud/backport/26946/stable20
[stable20] Respect default share permissions for federated reshares
2021-05-18 08:27:07 +02:00
Roeland Jago Douma 00a0b5550d Respect default share permissions for federated reshares
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2021-05-17 10:06:12 +00:00
Nextcloud bot 18dd1177c7
[tx-robot] updated from transifex 2021-05-17 02:26:57 +00:00
Nextcloud bot f80b1fe0cb
[tx-robot] updated from transifex 2021-05-16 02:27:10 +00:00
Nextcloud bot 39fa997f80
[tx-robot] updated from transifex 2021-05-15 02:29:40 +00:00
kesselb 3eff603dc5
Merge pull request #26965 from nextcloud/backport/26292/stable20
[stable20] ignore readonly flag for directories
2021-05-14 22:29:18 +02:00
Roeland Jago Douma 7d3bd5445c
Merge pull request #26971 from nextcloud/backport/26958/stable20
[stable20] Throttle MountPublicLinkController when share is not found
2021-05-14 10:55:33 +02:00
Nextcloud bot 18c62accf8
[tx-robot] updated from transifex 2021-05-14 02:25:22 +00:00
Roeland Jago Douma 1bba950e5c Throttle MountPublicLinkController when share is not found
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2021-05-12 19:28:41 +00:00
Robin Appelman 23df35feb0 ignore readonly flag for directories
see http://support.microsoft.com/kb/326549

Signed-off-by: Robin Appelman <robin@icewind.nl>
2021-05-12 16:26:32 +00:00
Roeland Jago Douma 57e1ee8d8f
Merge pull request #26956 from nextcloud/backport/26945/stable20
[stable20] Add bruteforce protection to the shareinfo endpoint
2021-05-12 14:13:00 +02:00
Roeland Jago Douma 94be523a40 Add bruteforce protection to the shareinfo endpoint
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2021-05-12 08:11:34 +00:00
Joas Schilling a0e0627de0 Don't break OCC if an app is breaking in it's Application class
Signed-off-by: Joas Schilling <coding@schilljs.com>
2021-05-12 07:42:04 +00:00
Nextcloud bot b8cb6a8e84
[tx-robot] updated from transifex 2021-05-12 02:26:38 +00:00
dependabot-preview[bot] 7dd0a2c147
Merge pull request #26909 from nextcloud/dependabot/npm_and_yarn/stable20/lodash-4.17.21 2021-05-11 09:21:11 +00:00
dependabot-preview[bot] d945d6a063 [Security] Bump lodash from 4.17.20 to 4.17.21
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.17.21. **This update includes a security fix.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.20...4.17.21)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>
2021-05-11 10:47:07 +02:00
Nextcloud bot e5f74851fa
[tx-robot] updated from transifex 2021-05-11 02:26:21 +00:00
Nextcloud bot 6fbdbfa971
[tx-robot] updated from transifex 2021-05-10 02:32:02 +00:00
Nextcloud bot 6a63c535a0
[tx-robot] updated from transifex 2021-05-09 02:25:37 +00:00
Nextcloud bot b436c3a8df
[tx-robot] updated from transifex 2021-05-08 02:25:13 +00:00
dependabot-preview[bot] 1954fb0f2f
Merge pull request #26920 from nextcloud/dependabot/npm_and_yarn/stable20/hosted-git-info-2.8.9 2021-05-07 20:34:04 +00:00
dependabot-preview[bot] 8f08f0115a
[Security] Bump hosted-git-info from 2.8.8 to 2.8.9
Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.8 to 2.8.9. **This update includes a security fix.**
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-05-07 19:47:37 +00:00
Nextcloud bot c312a62e86
[tx-robot] updated from transifex 2021-05-07 02:27:08 +00:00
Morris Jobke 6e53742255
Merge pull request #26894 from nextcloud/version/20.0.10
20.0.10
2021-05-06 14:09:54 +02:00
Morris Jobke 96e2a9f20d
20.0.10
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2021-05-06 13:01:01 +02:00
Nextcloud bot edae9eb9a4
[tx-robot] updated from transifex 2021-05-06 02:25:54 +00:00
Morris Jobke 14b7313042
Merge pull request #26882 from nextcloud/backport/26869/stable20
[stable20] l10n: Spelling unification
2021-05-05 13:43:33 +02:00
Valdnet b893b5563a Fix test
Signed-off-by: Valdnet <47037905+Valdnet@users.noreply.github.com>
2021-05-05 11:02:10 +00:00
Valdnet 849130c011 l10n: Spelling unification
Spelling unification in Transifex.

Signed-off-by: Valdnet <47037905+Valdnet@users.noreply.github.com>
2021-05-05 11:02:10 +00:00
Nextcloud bot 83ec0bd360
[tx-robot] updated from transifex 2021-05-04 02:26:38 +00:00
blizzz eca4717ca1
Merge pull request #26862 from nextcloud/backport/26149/stable20
[stable20] Only perform login check during ownership transfer for encryption
2021-05-03 15:02:16 +02:00
Christoph Wurst a82d72e5ce Only perform login check during ownership transfer for encryption
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2021-05-03 11:37:59 +00:00
Nextcloud bot cb58b11f19
[tx-robot] updated from transifex 2021-05-03 02:25:55 +00:00
Nextcloud bot 0ca700e916
[tx-robot] updated from transifex 2021-05-02 02:25:43 +00:00
Nextcloud bot a27a241d25
[tx-robot] updated from transifex 2021-05-01 02:26:54 +00:00
Roeland Jago Douma f2f15a7b42
Merge pull request #26836 from nextcloud/version/20.0.10/final
20.0.10 RC1
2021-04-30 12:47:19 +02:00
Roeland Jago Douma 12ed9c5cda Update bundle
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2021-04-30 12:17:11 +02:00
Roeland Jago Douma 31b6443091
Merge pull request #26542 from nextcloud/stable20-26433
[stable20] Limit size of properties to 2048 characters
2021-04-30 09:27:45 +02:00
Nextcloud bot 3b1ac61331
[tx-robot] updated from transifex 2021-04-30 02:28:11 +00:00
Roeland Jago Douma f8985dcd7c 20.0.10 RC1
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2021-04-29 20:56:12 +02:00
Roeland Jago Douma f902adf188
Merge pull request #25973 from nextcloud/backport/25417/stable20-fix-account-data-visibility-after-disabling-public-addressbook-upload
[stable20] Fix account data visibility after disabling public addressbook upload
2021-04-29 20:52:38 +02:00
Lukas Reschke 4ec4a99869 Limit size of properties to 2048 characters
It is unreasonable to expect that one of these fields would be longer
than 2048 characters. Whilst some have definitely lower limits (such as
for phone numbers or domain names), a upper bound as sanity check makes
sense.

Backport of https://github.com/nextcloud/server/pull/26433

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2021-04-29 20:45:11 +02:00
Morris Jobke c8374de7eb
Merge pull request #26824 from nextcloud/backport/26811/stable20
[stable20] Do not try to contact lookup server if not needed
2021-04-29 15:50:18 +02:00