ced3aeacb1
dump autoloader
...
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2016-10-24 21:31:03 +02:00
567e28b01a
Merge pull request #1885 from nextcloud/downstream-26295
...
App dependencies are now analysed on app enable as well - not only on…
2016-10-24 21:26:50 +02:00
72b5206c44
Merge pull request #1886 from nextcloud/downstream-26385
...
Remove checks about running on Windows
2016-10-24 21:15:54 +02:00
112641236b
Merge pull request #1881 from nextcloud/downstream-26354
...
log error when setting timezone to UTC fails
2016-10-24 21:14:59 +02:00
f920153f16
Throw exception because the logger causes session issues anyway that early in the request cycle
...
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2016-10-24 21:14:44 +02:00
2e0e68b57f
log error when setting timezone to UTC fails ( #26354 )
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-24 21:14:40 +02:00
4d01f23978
Merge pull request #1879 from nextcloud/fix-missing-import
...
Import the used classes
2016-10-24 21:12:24 +02:00
0bfd530b24
Merge pull request #1892 from nextcloud/refactor-readme
...
Refactor README
2016-10-24 19:17:06 +02:00
3e96f33995
Sort favorite files first Issue #1802
...
Signed-off-by: Ryan Welch <ryantwr@gmail.com>
2016-10-24 17:55:47 +01:00
a48c7316e2
Refactor README
...
Signed-off-by: Marius Blüm <marius@lineone.io>
2016-10-24 18:29:21 +02:00
817729dc3f
add upgrade command before repair, handle NeedsUpgradeExcaption better
2016-10-24 17:52:49 +02:00
38b3ac8213
Add ContentSecurityPolicyNonceManager
...
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-10-24 16:35:31 +02:00
cfae91ab64
Merge pull request #1828 from nextcloud/avatar-picker-improvements
...
Avatar picker improvements
2016-10-24 16:33:18 +02:00
14b1d946a8
Remove checks whether OC is running on Windows pt. 2
2016-10-24 16:12:17 +02:00
03ec052b4e
App dependencies are now analysed on app enable as well - not only on app install.
2016-10-24 15:59:46 +02:00
44cf67accd
Storage 503 message improvements
...
"Storage not available" is now "Storage temporarily not available".
Exceptions are now logged in DEBUG level, not FATAL.
2016-10-24 15:43:15 +02:00
a28528a254
Add ShareesAPI E-mail search
...
* Allow to search for SHARE_TYPE_EMAIL (4)
* Added tests
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-24 14:59:32 +02:00
b130267e58
Import the used classes
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-10-24 14:33:54 +02:00
0c637c8d73
[9.2] Add missing unit tests ( #25936 )
...
* Adjust unit test execution after folder rename
* Adjust login controller tests to match current behavior
* Fix broken unit tests
2016-10-24 14:25:52 +02:00
729c06548f
Merge pull request #1873 from nextcloud/files_sharing_singular
...
Move files_sharing Controllers => Controller
2016-10-24 14:16:02 +02:00
bd8b3f52f0
Merge pull request #1830 from nextcloud/downstream-26250
...
Improved exception messages
2016-10-24 13:58:29 +02:00
0aec8647c2
use smaller cropper on small screens
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2016-10-24 13:56:21 +02:00
ad902d6bea
center cropper vertically
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2016-10-24 13:54:56 +02:00
24786d5c51
Merge pull request #1872 from nextcloud/ds-26447-misleading-ssl-config
...
Fix misleading SSL/TLS SMTP email configuration
2016-10-24 13:30:54 +02:00
b4ebf03bef
Fix tests
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-24 13:25:59 +02:00
9e6634814e
Add support for CSP nonces
...
CSP nonces are a feature available with CSP v2. Basically instead of saying "JS resources from the same domain are ok to be served" we now say "Ressources from everywhere are allowed as long as they add a `nonce` attribute to the script tag with the right nonce.
At the moment the nonce is basically just a `<?php p(base64_encode($_['requesttoken'])) ?>`, we have to decode the requesttoken since `:` is not an allowed value in the nonce. So if somebody does on their own include JS files (instead of using the `addScript` public API, they now must also include that attribute.)
IE does currently not implement CSP v2, thus there is a whitelist included that delivers the new CSP v2 policy to newer browsers. Check http://caniuse.com/#feat=contentsecuritypolicy2 for the current browser support list. An alternative approach would be to just add `'unsafe-inline'` as well as `'unsafe-inline'` is ignored by CSPv2 when a nonce is set. But this would make this security feature unusable at all in IE. Not worth it at the moment IMO.
Implementing this offers the following advantages:
1. **Security:** As we host resources from the same domain by design we don't have to worry about 'self' anymore being in the whitelist
2. **Performance:** We can move oc.js again to inline JS. This makes the loading way quicker as we don't have to load on every load of a new web page a blocking dynamically non-cached JavaScript file.
If you want to toy with CSP see also https://csp-evaluator.withgoogle.com/
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-10-24 12:27:50 +02:00
f589f1a1d6
Move files_sharing Controllers => Controller
...
lib/Controller is the default location for controllers. So lets put them
all in there.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-24 11:46:25 +02:00
169faf8c32
Remove sensible information from exception message
...
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2016-10-24 11:42:04 +02:00
d0d7767366
Fix misleading SSL/TLS SMTP email configuration
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-10-24 11:34:30 +02:00
19ad058d06
Add message to NotSquareException thrown from Avatar
...
This prevents cryptic messages such as the following, from `user_ldap`:
Could not set avatar for uid=user,ou=People,dc=example,dc=net, because:
Signed-off-by: Olivier Mehani <shtrom@ssji.net>
Add message to NotPermittedException thrown from Files\Nodes\Folder
Ditto.
Don't use translation macros here as this seems to be pretty low-level
errors that generally get caught and prettified, and I don't want to
unduly clog down the lower layers.
Signed-off-by: Olivier Mehani <shtrom@ssji.net>
fixup! Add message to NotPermittedException thrown from Files\Nodes\Folder
2016-10-24 11:27:27 +02:00
f054adb429
Merge pull request #1866 from xcellardoor/master
...
Modified the SQLite warning of server/settings/templates/admin/tiptri…
2016-10-24 11:21:56 +02:00
57a5551c3d
Merge pull request #1853 from nextcloud/fix_di_share_api
...
Moved Share20OCS to proper Controller location
2016-10-24 10:57:47 +02:00
ab91fa2660
Merge pull request #1820 from nextcloud/4byte-filenames
...
Allow 4byte unicode filenames on supported platforms
2016-10-24 10:38:25 +02:00
f19d4ec29b
Modified the SQLite warning of server/settings/templates/admin/tiptricks.php to be more understandable and legible
...
Signed-off-by: Sam Cater <sam@samcater.com>
Added sign off of commit
2016-10-24 09:02:56 +01:00
6604e76e94
Fix middleware tests
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-24 09:52:34 +02:00
ea07bbc562
Move Share20OCS to ShareAPIController
...
It was already a controller just still residing in its old location.
* Moved ShareAPIController to user plain userID instead of user object
* Moved Share20OCS to ShareAPIController
* Removed initisation of class from Application.php and leave it to the
AppFramework
* Fixed tests
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-24 09:52:34 +02:00
7998689bc9
Added method to DB and fix test
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-24 09:45:04 +02:00
2aca56f207
Fix missing semicolon
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-10-24 09:26:30 +02:00
598c145430
Merge pull request #1849 from nextcloud/oc_26368
...
Adding capability about new chunking - refs #25682 (#26368 )
2016-10-22 15:11:49 +02:00
1be6213ba4
Merge pull request #1832 from nextcloud/select2-into-core
...
Select2 into core
2016-10-22 14:35:07 +02:00
169e889890
Add unit test
...
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-10-22 14:05:53 +02:00
038d02a27d
Merge pull request #1852 from nextcloud/downstream-25579
...
Adding Open Graph Support for public shares
2016-10-22 14:01:19 +02:00
2b22a5fafd
Merge pull request #1841 from nextcloud/oc_26359
...
Bumo zxcvbn && Fix zxcvbn path in setup page (26359)
2016-10-22 13:54:19 +02:00
ab3954745c
avoid that all avatars are copied to the author row when editing comments
...
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2016-10-21 22:57:06 +02:00
7792902808
Fix tests
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-21 21:43:15 +02:00
57d54c9b72
Use proper image
...
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2016-10-21 21:42:40 +02:00
e0d919bbfc
Adding Open Graph Support for public shares http://ogp.me/
...
In case no preview is available we display the ownCloud logo
Fix unit test
2016-10-21 21:42:40 +02:00
e8adf53f77
Merge pull request #1848 from nextcloud/php7.1-RC4
...
Bump to php7.1 RC4
2016-10-21 21:28:49 +02:00
1184ed6f6d
Merge pull request #1851 from nextcloud/oc_26352
...
cleanup occ help (#26352 )
2016-10-21 21:20:41 +02:00
3e5e07aa64
Template css order
...
Select2 systemtags removal
Settings again
Fix Script
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2016-10-21 16:56:31 +02:00
Morris Jobke
Roeland Jago Douma
Jörn Friedrich Dreyer
ryanwr
Marius Blüm
Lukas Reschke
RealRancor
Thomas Müller
Vincent Petry
Roeland Jago Douma
Joas Schilling
Thomas Müller
Robin Appelman
Olivier Mehani
Sam Cater
Arthur Schiwon
John Molakvoæ