df9d3c2bbc
Merge pull request #14091 from nextcloud/dependabot/npm_and_yarn/build/stable14/lodash-4.17.11
...
[Security] Bump lodash from 4.17.10 to 4.17.11 in /build
2019-02-07 21:25:40 +01:00
74f9fefbd5
[Security] Bump lodash in /apps/updatenotification
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.10 to 4.17.11. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases )
- [Changelog](https://github.com/lodash/lodash/blob/master/CHANGELOG )
- [Commits](https://github.com/lodash/lodash/compare/4.17.10...4.17.11 )
Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-02-07 21:15:33 +01:00
697dcee5cd
[Security] Bump lodash from 4.17.10 to 4.17.11 in /apps/oauth2
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.10 to 4.17.11. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases )
- [Changelog](https://github.com/lodash/lodash/blob/master/CHANGELOG )
- [Commits](https://github.com/lodash/lodash/compare/4.17.10...4.17.11 )
Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-02-07 21:10:54 +01:00
81b035e99a
Rebuild
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-02-07 21:08:28 +01:00
d268a0a965
Merge pull request #14089 from nextcloud/dependabot/npm_and_yarn/build/stable14/extend-3.0.2
...
[Security] Bump extend from 3.0.1 to 3.0.2 in /build
2019-02-07 21:05:20 +01:00
e174179d56
[Security] Bump lodash from 4.17.10 to 4.17.11 in /build
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.10 to 4.17.11. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases )
- [Changelog](https://github.com/lodash/lodash/blob/master/CHANGELOG )
- [Commits](https://github.com/lodash/lodash/compare/4.17.10...4.17.11 )
Signed-off-by: dependabot[bot] <support@dependabot.com>
2019-02-07 19:06:39 +00:00
eccf1c72d7
[Security] Bump lodash from 4.17.10 to 4.17.11 in /apps/accessibility
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.10 to 4.17.11. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases )
- [Changelog](https://github.com/lodash/lodash/blob/master/CHANGELOG )
- [Commits](https://github.com/lodash/lodash/compare/4.17.10...4.17.11 )
Signed-off-by: dependabot[bot] <support@dependabot.com>
2019-02-07 19:06:01 +00:00
234f7d513b
[Security] Bump extend from 3.0.1 to 3.0.2 in /build
...
Bumps [extend](https://github.com/justmoon/node-extend ) from 3.0.1 to 3.0.2. **This update includes security fixes.**
- [Release notes](https://github.com/justmoon/node-extend/releases )
- [Changelog](https://github.com/justmoon/node-extend/blob/master/CHANGELOG.md )
- [Commits](https://github.com/justmoon/node-extend/compare/v3.0.1...v3.0.2 )
Signed-off-by: dependabot[bot] <support@dependabot.com>
2019-02-07 18:27:58 +00:00
028038e5a3
Merge pull request #14069 from nextcloud/smb-3.0.1-14
...
[14] update icewind/smb to 3.0.1
2019-02-07 16:36:55 +01:00
130c094df0
Fix: Check if `$this->params['user']` is an array
...
Signed-off-by: William Pain <pain.william@gmail.com>
2019-02-07 13:33:21 +00:00
34226642c4
Merge pull request #14062 from nextcloud/version/noid/14.0.7
...
14.0.7
2019-02-06 23:54:18 +01:00
707b1c7909
[tx-robot] updated from transifex
2019-02-06 22:18:42 +00:00
c6a52efb29
update icewind/smb to 3.0.1
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2019-02-06 18:12:41 +01:00
3e56ae8f44
14.0.7
...
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2019-02-06 15:07:32 +01:00
ffaff1b2ab
[tx-robot] updated from transifex
2019-02-06 11:27:51 +00:00
83dd6ea9cf
Merge pull request #13913 from nextcloud/version/noid/14.0.7RC1
...
14.0.7 RC 1
2019-01-31 10:42:26 +01:00
537a703b45
14.0.7 RC 1
...
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2019-01-31 09:13:13 +01:00
1fd8e68fa0
Merge pull request #13931 from nextcloud/backport/12636/stable14
...
[stable14] handle mail send error gracefully
2019-01-31 09:10:26 +01:00
1572b2661e
Merge pull request #13922 from nextcloud/backport/13644/stable14
...
[stable14] ignore non existing users when retrieving details of group members
2019-01-30 22:53:35 +01:00
a7c897b445
Fix typos and unused return values
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2019-01-30 19:11:16 +00:00
41de36b5d8
fix typo
...
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2019-01-30 19:11:15 +00:00
849ad5a8bb
log full exception
...
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2019-01-30 19:11:13 +00:00
2dcab24f8c
handle mail send error gracefully
...
log the error in case a notification mail of a new share couldn't
be send to the recipient and finish the share operation successfully
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2019-01-30 19:11:12 +00:00
37e7f3dae6
ignore non existing users when retrieving details of group members
...
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2019-01-30 20:06:35 +01:00
3512f27bbe
Merge pull request #13928 from nextcloud/backport/13786/stable14
...
[stable14] Remove .css fileending from accessibility user css route
2019-01-30 20:04:34 +01:00
87fb1f411e
Remove .css fileending from accessibility user css route
...
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2019-01-30 16:50:16 +01:00
bb262f5c03
Merge pull request #13923 from nextcloud/backport/13865/stable14
...
[stable14] fix paged search with multiple bases (LDAP)
2019-01-30 15:57:44 +01:00
257f9c4a4b
Merge pull request #13921 from nextcloud/backport/13412/stable14
...
[stable14] forward error message from password policy
2019-01-30 15:24:31 +01:00
ecce44c050
Merge pull request #13916 from nextcloud/backport/13869/stable14
...
[stable14] Clean pending 2FA authentication on password reset
2019-01-30 15:06:44 +01:00
3add3f997e
Merge pull request #13888 from nextcloud/backport/13883/stable14
...
[stable14] Fix dropping a folder on a folder row
2019-01-30 13:52:04 +01:00
d77220bc7e
iterate over bases instead of doing parallel search
...
parallel search is not compatible with paged search, but the letter is
usually always applied.
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2019-01-30 12:12:24 +01:00
0306473a59
integration test: pages search scenario with multiple bases
...
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2019-01-30 12:12:14 +01:00
1ee53d6796
typo
...
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2019-01-30 12:11:07 +01:00
917ca1caf2
forward error message from password policy
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2019-01-30 10:57:41 +00:00
931056e711
Clean pending 2FA authentication on password reset
...
When a password is reste we should make sure that all users are properly
logged in. Pending states should be cleared. For example a session where
the 2FA code is not entered yet should be cleared.
The token is now removed so the session will be killed the next time
this is checked (within 5 minutes).
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-01-30 10:43:15 +01:00
bce6e7fc2b
Merge pull request #13901 from nextcloud/stable14-13897-fix-updating-the-password-of-a-link-share-when-passwords-are-enforced
...
[stable14] Fix updating the password of a link share when passwords are enforced
2019-01-30 09:53:16 +01:00
a94fa97350
Fix template format
...
Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
2019-01-30 00:16:50 +01:00
355edcee74
Fix updating the password of a link share when passwords are enforced
...
The password input was shown in the popup menu when passwords were not
enforced, or when they were enforced but no password was set, which
prevented updating/changing the password once set. As the popover menu
is shown only when the share is a link share, and the password input
should be shown too when password are enforced and a password is set no
condition is needed, so now the password input is always shown.
Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
2019-01-30 00:14:10 +01:00
ab684934ea
Remove unused parameter
...
Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
2019-01-30 00:08:09 +01:00
6fb6f3872e
Fix dropping a folder on a folder row
...
When the uploaded files have a relative path (that is, when a folder is
uploaded) it is first ensured that all the parent folders exist, which
is done by trying to create them. When a folder is created in the
currently opened folder the file list is updated and a row for the new
folder is added. However, this was done too when the folder already
existed, which caused the previous row to be removed and a new one added
to replace it.
For security reasons, some special headers need to be set in requests;
this is done automatically for jQuery by handling the "ajaxSend" event
in the document. In the case of DAV requests, if the headers are not set
the server rejects the request with "CSRF check not passed".
When a file or folder is dropped on a folder row the jQuery upload
events are chained from the initial drop event, which has the row as its
target. In order to upload the file jQuery performs a request, which
triggers the "ajaxSend" event in the row; this event then bubbles up to
the document, which is then handled by adding the special headers to the
request.
However, when a folder was dropped on a folder row that folder row was
removed when ensuring that the folder exists. The jQuery upload events
were still triggered on the row, but as it had been removed it had no
parent nodes, and thus the events did not bubble up. Due to this the
"ajaxSend" event never reached the document when triggered on the
removed row, the headers were not set, and the upload failed.
All this is simply fixed by not removing the folder row when trying to
create it if it existed already.
Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
2019-01-29 14:47:46 +00:00
c66f93ad58
Merge pull request #13708 from nextcloud/stb14-vcard-avatar-fixes
...
[stable14] vcard avatar fixes
2019-01-28 17:36:12 +01:00
d8b5dfe5a8
Merge pull request #13822 from nextcloud/dependabot/npm_and_yarn/build/stable14/bower-1.8.8
...
[Security] Bump bower from 1.8.4 to 1.8.8 in /build
2019-01-28 13:41:57 +01:00
c0c5921719
[tx-robot] updated from transifex
2019-01-26 01:12:36 +00:00
fb7d0c8435
[Security] Bump bower from 1.8.4 to 1.8.8 in /build
...
Bumps [bower](https://github.com/bower/bower ) from 1.8.4 to 1.8.8. **This update includes security fixes.**
- [Release notes](https://github.com/bower/bower/releases )
- [Changelog](https://github.com/bower/bower/blob/master/CHANGELOG.md )
- [Commits](https://github.com/bower/bower/compare/v1.8.4...v1.8.8 )
Signed-off-by: dependabot[bot] <support@dependabot.com>
2019-01-25 11:43:40 +00:00
32cc6dd7e5
[tx-robot] updated from transifex
2019-01-25 01:12:38 +00:00
c7fd71ee7d
Merge pull request #13767 from nextcloud/backport/13747/stable14
...
[stable14] Honor remember_login_cookie_lifetime
2019-01-24 18:32:43 +01:00
081f96b420
Merge pull request #13788 from nextcloud/stable14-13217-add-acceptance-tests-for-moving-and-copying-files
...
[stable14] Add acceptance tests for moving and copying files
2019-01-24 14:52:32 +01:00
45178d935c
Add acceptance tests for moving and copying selections to another folder
...
Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
2019-01-24 11:15:51 +01:00
1c764b22b5
Add acceptance tests for moving and copying files to another folder
...
Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
2019-01-24 11:15:51 +01:00
b0c1846794
Merge pull request #13782 from nextcloud/backport/13772/stable14
...
[stable14] Show proper default locale
2019-01-24 11:02:35 +01:00
Roeland Jago Douma
dependabot[bot]
Roeland Jago Douma
Morris Jobke
William Pain
Nextcloud bot
Robin Appelman
Christoph Wurst
Bjoern Schiessle
Arthur Schiwon
Julius Härtl
Christoph Wurst
Daniel Calviño Sánchez