Moritz Beck
b68661ed6e
Allow "same-origin" as "Referrer-Policy"
...
Fixes #11531
Although "same-origin" is more strict than e.g. strict-origin it showed up a warning in setupcheck
Based on https://scotthelme.co.uk/a-new-security-header-referrer-policy/
Signed-off-by: Moritz Beck <git@birkenstab.de>
2018-10-11 13:17:26 +02:00
Morris Jobke
fe45db6ae2
Merge pull request #11744 from burned42/fix_percent_sign_breaking_all_files_view
...
Remove duplicate call to decodeURIComponent
2018-10-11 12:20:07 +02:00
Daniel Calviño Sánchez
c2916b62d3
Ignore "session_lifetime" if it can not be converted to a number
...
When "session_lifetime" can not be converted to a number the interval
becomes a NaN due to dividing it by 2. This NaN was "dragged" over all
the other mathematical operations and caused the csrftoken to be got
again and again due to an infinite loop with no pauses in "setInterval".
Now, the interval is set to the default value instead if the
"session_lifetime" can not be converted to a number.
Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
2018-10-11 10:53:25 +02:00
Bernd Stellwag
0f030d885b
Remove duplicate call to decodeURIComponent
...
Signed-off-by: Bernd Stellwag <burned@zerties.org>
2018-10-11 08:00:28 +02:00
Christoph Wurst
f83c7bd2d6
Pin Bower versions
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-10-10 14:33:33 +02:00
Morris Jobke
b8d54bd53a
Fix a misleading setup check for .well-known/caldav & carddav
...
The problem is that the version without the slash is the correct one.
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2018-10-10 10:41:02 +02:00
Nextcloud bot
7c26bbbd82
[tx-robot] updated from transifex
2018-10-10 00:13:11 +00:00
Morris Jobke
ab3599155f
Merge pull request #11716 from nextcloud/bugfix/noid/use-numeric-placeholders-for-rtl-translations
...
Use numeric placeholders if there are multiple, so that RTL languages…
2018-10-09 16:31:52 +02:00
Joas Schilling
ea21aa3f7a
Use numeric placeholders if there are multiple, so that RTL languages can operate better
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2018-10-09 14:32:14 +02:00
Christoph Wurst
9af69ca2a5
Fix usage of deprecated OC.webroot
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-10-09 13:53:59 +02:00
Morris Jobke
43ed8bb91a
Merge pull request #11693 from nextcloud/refactor/remove-legacy-sharemodel-areavatarsenabled
...
Remove deprecated and unused legacy ShareConfigModel.areAvatarsEnabled()
2018-10-09 09:09:35 +02:00
Christoph Wurst
47f0447ce0
Remove deprecated and unused legacy ShareConfigModel.areAvatarsEnabled()
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-10-09 07:58:06 +02:00
Christoph Wurst
e836a1457c
Remove deprecated and noop APIs from OC.AppConfig
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-10-09 07:54:34 +02:00
Roeland Jago Douma
1178e85206
Merge pull request #11664 from nextcloud/feature/noid/has-been-interrupted-throw-exception
...
Syntactic sugar for hasBeenInterrupted
2018-10-08 21:31:29 +02:00
Morris Jobke
6994a2a87d
Merge pull request #11679 from nextcloud/refactor/remove-ie8-apis
...
Remove IE8 APIs
2018-10-08 18:36:07 +02:00
Morris Jobke
3330600dc5
Merge pull request #11682 from nextcloud/refactor/remove-deprecated-unused-fileDownloadPath
...
Remove deprecated and unused fileDownloadPath
2018-10-08 18:04:08 +02:00
Morris Jobke
8acd503975
Merge pull request #11681 from nextcloud/refactor/remove-deprecated-getScrollBarWidth
...
Remove deprecated window.getScrollBarWidth
2018-10-08 17:43:10 +02:00
Christoph Wurst
576e44f890
Remove deprecated and unused fileDownloadPath
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-10-08 16:46:36 +02:00
Christoph Wurst
a0499f4404
Remove deprecated window.getScrollBarWidth
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-10-08 16:41:33 +02:00
Christoph Wurst
dccb3ab5b2
Remove deprecated SVG helpers for old IEs
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-10-08 16:33:41 +02:00
Christoph Wurst
d9783af7bd
Remove outdated comment
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-10-08 16:21:31 +02:00
Christoph Wurst
d5b53d0ede
Remove OC.isIE8
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-10-08 16:18:51 +02:00
Christoph Wurst
dd459bbb7a
Remove OC.scaleFixForIE8
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-10-08 16:17:16 +02:00
Daniel Kesselberg
311de17730
Rename method to abortIfInterrupted
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2018-10-08 13:05:00 +02:00
Morris Jobke
7971ba5cc6
Merge pull request #10898 from nextcloud/feature/10684/default-logo-color-theme-colors
...
Switches the default logo color depending on the primary color
2018-10-08 10:33:22 +02:00
Morris Jobke
75f4b7b191
Merge pull request #11620 from nextcloud/followup/11615
...
Extract translated strings of compiled handlebars
2018-10-08 10:24:31 +02:00
Daniel Kesselberg
14d802b8f3
Refactor method to throw exception instead of true/false
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2018-10-07 18:12:38 +02:00
Nextcloud bot
4c47ec005f
[tx-robot] updated from transifex
2018-10-07 00:12:21 +00:00
Roeland Jago Douma
8932a51b91
Extract translated strings of compiled handlebars
...
Follow up to #11615
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-10-05 12:32:48 +02:00
Roeland Jago Douma
02e326f8f9
Merge pull request #11624 from nextcloud/fix/11468/app-menu-scrollbar
...
Fixes the apps menu scrollbar
2018-10-05 10:57:21 +02:00
Nextcloud bot
d9fe68ed12
[tx-robot] updated from transifex
2018-10-05 00:12:56 +00:00
Michael Weimann
32856197b9
Fixes the apps menu scrollbar
...
Signed-off-by: Michael Weimann <mail@michael-weimann.eu>
2018-10-04 22:09:28 +02:00
Roeland Jago Douma
363ec1d3c3
Remove leftover '
...
Followup to #11583
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-10-04 16:02:09 +02:00
Roeland Jago Douma
b0fd31496b
Move OC.Share to compiled handlebars
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-10-04 09:53:45 +02:00
Roeland Jago Douma
cd7c17482e
Move systemtags to compiled handlebars
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-10-04 09:53:44 +02:00
Roeland Jago Douma
dc037d9332
Merge pull request #11606 from nextcloud/fix/2fa-login-screen-design-III
...
Improve 2FA login screens
2018-10-04 07:40:07 +02:00
Nextcloud bot
d9504a4e06
[tx-robot] updated from transifex
2018-10-04 00:12:07 +00:00
Morris Jobke
ac330077d8
Merge pull request #11576 from nextcloud/feature/endpoint_for_clients_to_fetch_apppassword
...
Allow clients to request an apppassword if they still use the real password
2018-10-03 22:26:26 +02:00
Christoph Wurst
ae2cd50427
Improve 2FA login screens
...
* Show icon if no provider is available
* Reduce shown text if no provider available
* Fix login button icons
* Make backup codes button primary if the only options to log in
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-10-03 22:16:54 +02:00
Roeland Jago Douma
78273cb1e6
Add an endppoint for clients to request an app password
...
Now that we allow enforcing 2 factor auth it make sense if we also allow
and endpoint where the clients can in the background fetch an
apppassword if they were configured before the login flow was present.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-10-03 19:05:20 +02:00
Nextcloud bot
67d04f2d57
[tx-robot] updated from transifex
2018-10-03 16:58:45 +00:00
Roeland Jago Douma
f4387ed385
Merge pull request #11592 from nextcloud/feature/noid/update-strengthify
...
Update strengthify to be able to set a nonce
2018-10-03 18:36:06 +02:00
Morris Jobke
fc60d9f852
Merge pull request #11566 from nextcloud/404-design
...
Improve 404 page design, fix #11370
2018-10-03 17:40:46 +02:00
Morris Jobke
c8e617b07c
Set nonce for loading the zxcvbn
...
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2018-10-03 17:05:01 +02:00
Morris Jobke
24c74b3db9
Update strengthify
...
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2018-10-03 17:05:01 +02:00
Jan-Christoph Borchardt
f393cc017d
Improve 404 page design, fix #11370
...
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
2018-10-03 16:12:00 +02:00
Christoph Wurst
335a461250
Fix design of 2FA login screens
...
* Fix rending of empty selection screen (ul missing)
* Fix rendering of backup codes inputs
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-10-03 15:31:23 +02:00
Roeland Jago Douma
ae71a5574f
Merge pull request #11571 from nextcloud/dropdown-bottom-users-list-fix
...
Force multiselect max-height to 5.5 items
2018-10-03 12:04:45 +02:00
Marin Treselj
a92e8b4c18
Merge pull request #11538 from nextcloud/heading-bold
...
Set headings to Semibold for better information architecture
2018-10-03 10:09:57 +02:00
Roeland Jago Douma
6979b2ea0c
Merge pull request #11557 from nextcloud/update-design
...
Accessibility and design fixes for update and redirect pages
2018-10-03 10:01:20 +02:00