bbd5f28415
Let users configure security headers in their Webserver
...
Doing this in the PHP code is not the right approach for multiple reasons:
1. A bug in the PHP code prevents them from being added to the response.
2. They are only added when something is served via PHP and not in other cases (that makes for example the newest IE UXSS which is not yet patched by Microsoft exploitable on ownCloud)
3. Some headers such as the Strict-Transport-Security might require custom modifications by administrators. This was not possible before and lead to buggy situations.
This pull request moves those headers out of the PHP code and adds a security check to the admin settings performed via JS.
2015-03-02 19:07:46 +01:00
4009f15255
Merge pull request #14593 from owncloud/fix/13994
...
Add detection for invalid CLI configuration for settings page
2015-03-02 09:19:26 +01:00
3f91e3757f
[tx-robot] updated from transifex
2015-03-02 01:55:00 -05:00
a6f5d3e1e8
Merge pull request #14614 from jakobsack/master
...
Show time difference of last cron run instead of absolute time
2015-03-01 12:22:39 +01:00
97a624dba5
Improve language on backgroundjob admin page
2015-03-01 11:51:40 +01:00
ff85d38c2a
[tx-robot] updated from transifex
2015-03-01 01:54:38 -05:00
7a84c90d71
Rename $human_time to $relative_time in cron settings
2015-02-28 21:49:23 +01:00
0efed5c216
Add absolute time of last cronjob as hover tip
2015-02-28 21:48:19 +01:00
6e906fc4d4
Use relative time for cron status
2015-02-28 21:09:25 +01:00
42f6448da2
[tx-robot] updated from transifex
2015-02-28 01:55:32 -05:00
b6d8a48ce1
Add detection for invalid CLI configuration for settings page
...
This change will log all failures that prevent the CLI cronjob from happening to the database and display a warning to administrators when an error happened.
To test:
1. Configure some invalid CLI php.ini settings
2. Enable the CLI cronjob and run php cron.php
3. See the errors printed and also in the admin page
4. Configure the CLI settings correctly
5. Errors should be gone.
Fixes https://github.com/owncloud/core/issues/13994
2015-02-27 20:20:34 +01:00
f72f9e0159
Merge pull request #14530 from owncloud/revert-14403
...
Revert "Updating license headers"
2015-02-27 00:39:29 -08:00
d20061e5b1
[tx-robot] updated from transifex
2015-02-27 01:55:28 -05:00
2d9886d1c3
Merge pull request #14527 from owncloud/clarify-link
...
clarify link on apps management to the dev documentation
2015-02-26 16:10:58 +01:00
18d43f7469
Merge pull request #14474 from owncloud/move-utf-8-check-to-setup
...
Move UTF-8 check to setup
2015-02-26 16:00:31 +01:00
e887f7b9b7
clarify link on apps management to the dev documentation
2015-02-26 15:02:39 +01:00
06aef4e8b1
Revert "Updating license headers"
...
This reverts commit 6a1a4880f0
2015-02-26 11:37:37 +01:00
8a4fddeb4a
[tx-robot] updated from transifex
2015-02-26 01:55:50 -05:00
31f881415b
[tx-robot] updated from transifex
2015-02-25 01:55:51 -05:00
06cf93e6ee
Move UTF-8 check to setup
...
Nobody reads the warnings anyways and so we should enforce it at installation time... Also allows us to get rid of some duplicated code.
To test change the `default_charset` to something other than `utf-8` or `UTF-8`, both should work fine with that change here. An error should then get shown.
We already set those default charsets in the shipped .user.ini and .htaccess
2015-02-24 23:51:36 +01:00
e5c6af5102
Merge pull request #10599 from owncloud/move_passwordchange_text
...
Make the password changed msg inline to fix #10242
2015-02-24 11:54:17 +01:00
da8e34cf7f
Merge pull request #14009 from owncloud/installing-installed-apps-is-stupid
...
don't allow installation of already installed apps - fixes #14004
2015-02-24 10:34:06 +01:00
cdb4cfd939
[tx-robot] updated from transifex
2015-02-24 01:54:58 -05:00
39d8406933
don't allow installation of already installed apps - fixes #14004
2015-02-23 23:16:28 +01:00
66e3211fd8
Merge pull request #13439 from owncloud/app-filter
...
Make the search box filter apps
2015-02-23 21:51:53 +01:00
e144d3aa49
Added unit test for app filter
2015-02-23 15:29:25 +01:00
df3c73de72
Merge pull request #14403 from owncloud/update-license-headers
...
Update license headers
2015-02-23 13:53:16 +01:00
6a1a4880f0
Updating license headers
2015-02-23 12:13:59 +01:00
f63b09faca
[tx-robot] updated from transifex
2015-02-23 01:55:10 -05:00
ef09e5d395
[tx-robot] updated from transifex
2015-02-22 01:54:42 -05:00
906c0e7798
[tx-robot] updated from transifex
2015-02-21 01:54:38 -05:00
79ef5eda96
[tx-robot] updated from transifex
2015-02-20 01:55:01 -05:00
75a7bcb10c
Merge pull request #14199 from owncloud/cast-type-manually
...
Manually type-cast all AJAX files
2015-02-19 17:19:54 +01:00
bdc503b03d
Merge pull request #14295 from owncloud/encode-request-token-for-avatars
...
Encode Requesttoken for avatars
2015-02-19 16:20:41 +01:00
294137dda6
[tx-robot] updated from transifex
2015-02-19 01:55:43 -05:00
3632962000
Make the search box filter apps
2015-02-19 00:01:03 +01:00
b9c39b60ec
[tx-robot] updated from transifex
2015-02-18 01:55:40 -05:00
0ea6de2f8c
Encode Requesttoken for avatars
...
Fixes new avatar selection in master half, other half will work when https://github.com/owncloud/core/pull/14266 has get merged.
Shocking to see how much places in our code do it wrong 🔫
2015-02-17 15:25:38 +01:00
b701bbd8c5
Use APCu only if available in version 4.0.6 and higher
...
APCu before 4.0.6 is unbelievable buggy and tend to segfault the PHP process (i.e. the whole webserver)
This potentially fixes https://github.com/owncloud/core/issues/14175
Requires a backport to stable8
2015-02-17 13:28:02 +01:00
76c511de92
Merge pull request #14056 from owncloud/refactor/13976
...
Refactor OC_Request into TrustedDomainHelper and IRequest
2015-02-17 13:17:04 +01:00
30ca14021c
[tx-robot] updated from transifex
2015-02-17 01:56:23 -05:00
886bda5f81
Refactor OC_Request into TrustedDomainHelper and IRequest
...
This changeset removes the static class `OC_Request` and moves the functions either into `IRequest` which is accessible via `\OC::$server::->getRequest()` or into a separated `TrustedDomainHelper` class for some helper methods which should not be publicly exposed.
This changes only internal methods and nothing on the public API. Some public functions in `util.php` have been deprecated though in favour of the new non-static functions.
Unfortunately some part of this code uses things like `__DIR__` and thus is not completely unit-testable. Where tests where possible they ahve been added though.
Fixes https://github.com/owncloud/core/issues/13976 which was requested in https://github.com/owncloud/core/pull/13973#issuecomment-73492969
2015-02-16 22:13:00 +01:00
7f624188a7
Merge pull request #14261 from owncloud/fix-last-login-master
...
Return milliseconds instead of seconds for lastLogin - refs #14005
2015-02-16 20:22:47 +01:00
3c75a440a6
Return milliseconds instead of seconds for lastLogin - refs #14005
2015-02-16 17:41:44 +01:00
5a5d6bf4db
Merge pull request #14128 from owncloud/drop-unused-methods
...
Remove unused function and correct PHPDoc
2015-02-16 17:37:36 +01:00
c6705ab574
Merge pull request #13890 from owncloud/add-no-referrer
...
Add `rel="noreferrer"` where possible and switch to HTTPS
2015-02-16 14:36:44 +01:00
7e45f5d27b
Remove unused function and correct PHPDoc
2015-02-16 13:46:45 +01:00
786ff6a5a3
[tx-robot] updated from transifex
2015-02-16 01:54:30 -05:00
31c0cce092
[tx-robot] updated from transifex
2015-02-15 01:54:31 -05:00
2f851ff8bb
[tx-robot] updated from transifex
2015-02-14 01:54:42 -05:00
4032c7b685
This is an array
2015-02-13 14:23:22 +01:00
a7df23ceba
Manually type-case all AJAX files
...
This enforces proper types on POST and GET arguments where I considered it sensible. I didn't update some as I don't know what kind of values they would support 🙈
Fixes https://github.com/owncloud/core/issues/14196 for core
2015-02-13 13:33:20 +01:00
6b1ed4d688
[tx-robot] updated from transifex
2015-02-13 01:55:06 -05:00
b68c376e8e
Merge pull request #13913 from rullzer/showusergroups
...
Added overview of groups a user is member of
2015-02-12 11:21:40 +01:00
0b38a48bb4
Merge pull request #14135 from cmeh/master
...
Clean-up of messages (orthography, format)
2015-02-12 11:03:49 +01:00
7a8f95be2f
Added overview of groups a user is a member of
2015-02-12 10:49:55 +01:00
f24f7f7c74
Orthography: "Back-end" -> Backend (without hyphen) and correction of "users" to the genitive "user's"
2015-02-12 08:18:24 +01:00
01f89083ba
Adding a missing space between value and unit
...
Added the missing space between value and unit, as it is formatted in all other places across ownCloud.
2015-02-12 08:14:12 +01:00
e929d43bb6
[tx-robot] updated from transifex
2015-02-12 01:54:41 -05:00
95cfe292f4
Make the password changed msg inline to fix #10242
2015-02-11 14:27:05 +01:00
9baf7a0a3f
[tx-robot] updated from transifex
2015-02-11 01:55:07 -05:00
124e48aec0
[tx-robot] updated from transifex
2015-02-10 01:55:06 -05:00
4172ba48d4
Deduplicate template code and do not translate the links
2015-02-09 16:01:52 +01:00
e2d4b3c123
[tx-robot] updated from transifex
2015-02-09 01:54:53 -05:00
f167c3d9f6
Merge pull request #13895 from owncloud/disable-autocomplete-1
...
Disable autocomplete for SMTP Password
2015-02-08 14:03:57 +01:00
60e771685e
[tx-robot] updated from transifex
2015-02-08 01:54:53 -05:00
485e2a282b
Merge pull request #13753 from owncloud/use-403-instead-of-200
...
Use 403 instead of 200 response
2015-02-07 13:25:15 +01:00
4bf7b2c130
[tx-robot] updated from transifex
2015-02-07 01:54:35 -05:00
988027fdca
[tx-robot] updated from transifex
2015-02-06 15:26:04 -05:00
80e38b84dc
[tx-robot] updated from transifex
2015-02-06 06:49:06 -05:00
c1d661d35b
Coherent use of "SQLite" in lines 119 and 124
...
Just a cosmetic detail, but very obvious when working on localisations.
2015-02-06 10:00:47 +01:00
bd60abbefc
[tx-robot] updated from transifex
2015-02-06 01:57:07 -05:00
d748368ecb
Don't highly discourage
2015-02-05 17:21:10 +01:00
7a9d428d6f
Merge pull request #13907 from owncloud/enhance-sqlite-warning
...
enhance sqlite warning on admin page as well as during setup
2015-02-05 13:07:56 +01:00
9adff77040
[tx-robot] updated from transifex
2015-02-05 01:54:49 -05:00
f86c73c9f6
enhance sqlite warning on admin page as well as during setup - fixes #13906
2015-02-04 20:55:54 +01:00
30b24696c8
fix user loading
2015-02-04 17:19:11 +01:00
40244c9eef
Disable autocomplete for SMTP Password
...
While really nearly no modern browser cares about it anymore too much it's still not wrong to have it here (and also stops some automated scanners reporting this...)
2015-02-04 17:00:39 +01:00
b432ea29c9
Add `rel="noreferrer"` where possible and switch to HTTPS
...
Just to follow good practise and prevent some automated scanners to complain about "Cross-domain Referer leakage".
2015-02-04 16:25:37 +01:00
77e9c212ed
[tx-robot] updated from transifex
2015-02-04 01:55:49 -05:00
6aef13fb07
[tx-robot] updated from transifex
2015-02-03 01:54:50 -05:00
359abca50c
Merge pull request #13790 from owncloud/fix-subadmin-group
...
Fix subadmin listing of group
2015-02-02 09:45:28 +01:00
800829d93d
[tx-robot] updated from transifex
2015-02-02 01:54:32 -05:00
9beb033a9f
fix trusted domain localization
2015-02-01 16:06:12 +01:00
a3067b3b9f
[tx-robot] updated from transifex
2015-02-01 01:54:33 -05:00
c877fbdac8
[tx-robot] updated from transifex
2015-01-31 01:54:39 -05:00
fcd5056376
Consistent variable naming
2015-01-30 18:31:04 +01:00
0f7634eadc
Switch to a factory and add unit tests
2015-01-30 17:24:42 +01:00
7e7dd92f6b
Add unit tests
2015-01-30 14:29:46 +01:00
734dcc82dd
Fix subadmin listing of group
...
Without this patch filtering for the "_everyone" (empty) group did not work for subadmins.
Fixes itself.
2015-01-30 14:29:46 +01:00
f4d20dc1f3
[tx-robot] updated from transifex
2015-01-30 01:55:06 -05:00
b9f180e001
Use 403 instead of 200 response
...
A forbidden should throw a 403 and this makes it easier for me to do some automated testing.
2015-01-29 12:04:54 +01:00
65871ffea3
[tx-robot] updated from transifex
2015-01-29 01:54:35 -05:00
55142186de
[tx-robot] updated from transifex
2015-01-28 01:55:53 -05:00
7bd7c20295
Check whether return is an error case before using it
2015-01-30 16:39:57 +01:00
a870dbe70b
Merge pull request #13636 from owncloud/add-warning-if-restore-of-data-is-not-possible
...
Add value if restore of data is possible for a user
2015-01-27 14:12:05 +01:00
9fbeaf0fd9
Add value if restore of data is possible for a user
...
* reason: nice to know before password change in user management
* restore is possible:
* encryption is disabled
* encryption is enabled, admin and user has checked the
restore option
* if not possible:
* highlight users row in red once the admin wants to change the password
* show also a little tipsy
2015-01-27 13:23:19 +01:00
c8f58054b0
[tx-robot] updated from transifex
2015-01-27 01:54:34 -05:00
5da4071c45
Merge pull request #13621 from owncloud/system-config-multiset
...
Add a method to set/unset multiple config values with one write
2015-01-26 13:36:22 +01:00
a698637e91
[tx-robot] updated from transifex
2015-01-25 01:54:38 -05:00
b8e1dd9c87
[tx-robot] updated from transifex
2015-01-24 01:54:51 -05:00
039397bd31
Use setConfigs() instead of calling setConfig() multiple times
2015-01-23 14:52:21 +01:00
5f3c6a97b2
[tx-robot] updated from transifex
2015-01-22 01:55:09 -05:00
dc4ceda2f5
Merge pull request #13519 from Sugaroverdose/fix_#13500
...
Do not clear fields until request return success in users admin page on user creation
2015-01-21 20:05:17 +01:00
bb3d56155b
Merge pull request #13559 from owncloud/increase-log-table-margin
...
add margin to log table - fixes #13558
2015-01-21 17:18:30 +01:00
879248ad3d
use title instead of name
2015-01-21 16:52:38 +01:00
3de967c10d
add margin to log table - fixes #13558
2015-01-21 16:19:14 +01:00
b8ab21d3ad
[tx-robot] updated from transifex
2015-01-21 01:55:15 -05:00
2244e0eba7
do not clear fields until request return success
2015-01-20 23:14:41 +03:00
a87a2e8e2c
Merge pull request #13494 from owncloud/windows_warning
...
add a Windows warning
2015-01-20 14:12:30 +01:00
828d7d6cf5
add a Windows warning
2015-01-20 13:37:50 +01:00
2fe6513557
Merge pull request #13454 from owncloud/improve-empty-displayname
...
also show message for empty display name if change of it isn't allowed
2015-01-20 10:27:50 +01:00
2ac015256f
[tx-robot] updated from transifex
2015-01-20 01:54:37 -05:00
956e17d008
also show message for empty display name if change of it isn't allowed
2015-01-19 15:45:03 +01:00
c9db9523b1
Merge pull request #13419 from owncloud/drop-animation-user-list
...
Drop the hide and show of new users in user list
2015-01-19 15:08:57 +01:00
5b3ff7867f
Merge pull request #13447 from owncloud/fix_typo
...
fix typo - caused by 3d997e8c62
2015-01-19 08:30:43 +01:00
3404bd8cdd
[tx-robot] updated from transifex
2015-01-19 01:54:31 -05:00
7b9343f385
fix typo - caused by 3d997e8c62
2015-01-18 22:08:11 +01:00
fa9834372d
Merge pull request #13443 from owncloud/fix-filtering-for-users
...
Fix filtering for users when $gid is empty
2015-01-19 11:39:27 +01:00
2272bcedeb
Fix filtering for users when $gid is empty
...
Previously when $gid was empty the users were not filtered at all. Rendering the search function in the user management pretty useless.
Fixes itself
2015-01-18 18:31:03 +01:00
31cd5185f1
[tx-robot] updated from transifex
2015-01-18 01:54:34 -05:00
60c4cb1dd6
[tx-robot] updated from transifex
2015-01-17 01:54:40 -05:00
1b81339dfd
Drop the hide and show of new users in user list
...
* causes the first load after the initial load to hide some users in the viewport
and showing them again, but with a scrolled up viewport
* causes higher load for nearly never visible effects
* fixes #12962
2015-01-16 18:11:31 +01:00
9526acbcc4
Merge pull request #13413 from owncloud/apps-cancelloadonswitch
...
Cancel app list load when switching categories
2015-01-16 13:42:40 +01:00
6e20a408b4
Cancel app list load when switching categories
2015-01-16 12:23:02 +01:00
d3cd2b3e0f
sorting enabled and disabled apps alphabetically - fixes #13404
2015-01-16 12:07:08 +01:00
a65f666834
[tx-robot] updated from transifex
2015-01-16 01:55:51 -05:00
022b698475
Show mail address & display name if it is read only
...
* gives the user the chance to verify it's mail address
and display name
* ref #12823
* fixes #13393
2015-01-15 17:51:54 +01:00
4c233fef2a
[tx-robot] updated from transifex
2015-01-15 01:54:41 -05:00
89f17ef6fe
adapt decrypt all and restore/delete key backups to the new folder structure for encryption key introduced with OC8
2015-01-13 12:45:33 +01:00
3ece0a7767
[tx-robot] updated from transifex
2015-01-13 01:56:58 -05:00
9e550ab844
[tx-robot] updated from transifex
2015-01-12 01:55:52 -05:00
3425c73815
[tx-robot] updated from transifex
2015-01-11 01:54:32 -05:00
ae3483299c
Merge pull request #13212 from owncloud/cache-appstore-response
...
Cache responses from the AppStore server
2015-01-10 09:56:00 +01:00
22e5220c1f
[tx-robot] updated from transifex
2015-01-10 01:54:35 -05:00
b8b4df5425
Cache responses from the AppStore server
...
Otherwise every time the AppStore was opened a lot of connections to the AppStore server were made which resulted in a terrible performance.
This changeset will cache the response for a sensible time so that only the first request will be somewhat slow.
Performance changes:
- Loading a category took previously more than 3 seconds on my machine. Now for every follow-up request it takes less than 200ms, resulting in a performance gain of 1950%
- Loading the category list took previously about 750ms - now it takes 154ms, a total performance gain of 395%
2015-01-09 19:49:59 +01:00
22ab56a592
Fix js error in personal settings if there is no password field
2015-01-09 15:38:39 +01:00
d4fc2f555b
[tx-robot] updated from transifex
2015-01-09 01:55:22 -05:00
6a5f12beca
Merge pull request #12988 from owncloud/logfile_download
...
Logfile download
2015-01-09 00:33:22 +01:00
6bda95037f
[tx-robot] updated from transifex
2015-01-08 01:56:00 -05:00
f579f2bd94
add Download logfile button to admin settings
...
add logSettingsController
add download logfile button
move getEntries to LogSettingsController
move set log level to logsettingscontroller.php
add warning if logfile is bigger than 100MB
add unit test for set log level
fix typecasting, add new line at EoF
show log and logfile download only if log_type is set to owncloud
add unit test for getFilenameForDownload
2015-01-07 14:55:53 +01:00
5ce295907f
Merge pull request #12687 from owncloud/auto-escape-t-placeholders
...
Auto escape t placeholders
2015-01-07 12:57:33 +01:00
bfdf0db7c0
Autoescape of placeholders in t() and p() - for JS
...
* add disableEscape parameter to disable this functionality
* drop usage of escapeHTML() that is now done inside t()
* add unit test for escaped and not escaped placeholder
* proper JSDoc
2015-01-07 12:56:32 +01:00
3d997e8c62
Fix incorrect warning about setting the overwrite.cli.url
2015-01-07 09:02:33 +01:00
2daf90dae6
[tx-robot] updated from transifex
2015-01-07 01:55:42 -05:00
b2124d8d4f
Fix group select autocomplete
2015-01-06 15:48:15 +01:00
fc38d4cc81
fixing wrong usage of license vs licence
2015-01-06 13:07:17 +01:00
8776271103
[tx-robot] updated from transifex
2015-01-05 01:54:36 -05:00
84ed1034b4
[tx-robot] updated from transifex
2015-01-04 01:54:53 -05:00
05ffa3ab7a
[tx-robot] updated from transifex
2015-01-03 01:54:29 -05:00
Lukas Reschke
Morris Jobke
Jenkins for ownCloud
Jakob Sack
Thomas Müller
Vincent Petry
Robin Appelman
Roeland Jago Douma
cmeh
kondou
Joas Schilling
Bernhard Posselt
Arthur Schiwon
Volkan Gezer
Sugaroverdose
Frank Karlitschek
Bjoern Schiessle
Georg Ehrke