nextcloud

Commit Graph

Author	SHA1	Message	Date
Lukas Reschke	ab9ea97d3a	Catch not existing User-Agent header In case of an not sent UA header consider the client as valid	2015-04-23 16:33:51 +02:00
Lukas Reschke	ed0b465cf9	Use 403 instead a 50x response	2015-04-20 12:53:40 +02:00
Lukas Reschke	4ea205e262	Block old legacy clients This Pull Request introduces a SabreDAV plugin that will block all older clients than 1.6.1 to connect and sync with the ownCloud instance. This has multiple reasons: 1. Old ownCloud client versions before 1.6.0 are not properly working with sticky cookies for load balancers and thus generating sessions en masse 2. Old ownCloud client versions tend to be horrible buggy In some cases we had in 80minutes about 10'000 sessions created by a single user. While this change set does not really "fix" the problem as 3rdparty legacy clients are affected as well, it is a good work-around and hopefully should force users to update their client	2015-04-20 11:12:17 +02:00

Author

SHA1

Message

Date

Lukas Reschke

ab9ea97d3a

Catch not existing User-Agent header

In case of an not sent UA header consider the client as valid

2015-04-23 16:33:51 +02:00

Lukas Reschke

ed0b465cf9

Use 403 instead a 50x response

2015-04-20 12:53:40 +02:00

Lukas Reschke

4ea205e262

Block old legacy clients

This Pull Request introduces a SabreDAV plugin that will block all older clients than 1.6.1 to connect and sync with the ownCloud instance.

This has multiple reasons:

1. Old ownCloud client versions before 1.6.0 are not properly working with sticky cookies for load balancers and thus generating sessions en masse
2. Old ownCloud client versions tend to be horrible buggy

In some cases we had in 80minutes about 10'000 sessions created by a single user. While this change set does not really "fix" the problem as 3rdparty legacy clients are affected as well, it is a good work-around and hopefully should force users to update their client

2015-04-20 11:12:17 +02:00

3 Commits