cfba90a78d
Fix system tags proppatch with booleans
...
Backbone webdav adapter now converts booleans and ints to strings.
Fixed system tags to use "true" / "false" strings for booleans instead
of 1 / 0.
2016-01-27 11:09:43 +01:00
4ea0d3c05d
Deprecate getFirstWeekDay() and getDateFormat() in favor of l()
2016-01-26 14:02:31 +01:00
ecf2d178b1
[tx-robot] updated from transifex
2016-01-26 01:56:06 -05:00
0a1350d5ac
System tags sidebar selector now respects permissions
...
For admins: display the namespace behind the tag name.
For users: no namespace, don't display non-assignable tags in the
dropdown, display already assigned non-assignable tags with a different
style
2016-01-25 10:45:02 +01:00
d4198607ec
Expose whether user is an admin through a method
...
Which is nicer than an obscure global variable
2016-01-25 10:07:47 +01:00
ce753231eb
Merge pull request #18444 from owncloud/occ-config-types
...
occ config:system:set can now set other value types
2016-01-25 10:02:51 +01:00
44043cb1d7
Merge pull request #21811 from owncloud/fix-unauthenticated-avatar
...
Show default placeholder if avatar image can't be fetched
2016-01-25 10:01:23 +01:00
ef4fca22d1
Merge pull request #21844 from owncloud/drop-image-path
...
Remove OC_Helper::imagePath and use the proper public interface
2016-01-25 10:00:21 +01:00
a331979a67
[tx-robot] updated from transifex
2016-01-25 01:54:39 -05:00
75e6734ef4
Remove OC_Helper::imagePath and use the proper public interface
2016-01-24 18:04:20 +01:00
82d3852815
[tx-robot] updated from transifex
2016-01-24 01:54:40 -05:00
f92119e02f
[tx-robot] updated from transifex
2016-01-23 01:55:35 -05:00
2d569d92eb
Merge pull request #21850 from owncloud/more-output-for-integrity-check
...
Print output for integrity check during ./occ upgrade
2016-01-22 14:59:29 +01:00
e7aab8f31f
Print output for integrity check during ./occ upgrade
2016-01-22 13:18:00 +01:00
0bccdbc959
Merge pull request #21849 from owncloud/add-custom-marker-into-htaccess
...
Add custom marker into htaccess and execute integrity check after installation
2016-01-22 13:13:59 +01:00
e3013a99ef
Merge pull request #21816 from owncloud/require-a-specific-path-instead-of-autoguessing
...
Use path instead of app id for occ app signing
2016-01-22 13:13:41 +01:00
a0b383c5e8
Run on installer
2016-01-22 11:52:53 +01:00
3038006e8e
Add a default app icon for apps that don't have one
2016-01-22 11:38:11 +01:00
b74cdb7da3
[tx-robot] updated from transifex
2016-01-22 01:55:28 -05:00
f108dbfa6a
Move getDescriptiveTag to core
2016-01-21 15:56:25 +01:00
2b4532c6b9
Merge pull request #21797 from owncloud/proper-controller-in-core
...
Move controller in core/ to a common subfolder
2016-01-21 15:20:10 +01:00
ec8022d241
Merge pull request #20847 from owncloud/systemtags-ui
...
System tags sidebar section
2016-01-21 12:12:40 +01:00
ea367b598a
Use path instead of app id
...
This change requires the usage of a path instead of the App ID when signing code. This has the advantage that developers can also sign code under a different location to make it easier. (e.g. remove `.git`, …)
Also it adds an example command usage as well as a link to the documentation
2016-01-20 20:38:18 +01:00
b188de242e
Show default placeholder if avatar image can't be fetched
...
* fixes owncloud/documents#601
* ref #14564
2016-01-20 15:18:57 +01:00
d6a63016ae
move lost controller to core/controller
...
* lostpassword.css is unneeded since #11696 is merged - 1b50d4f7ce
2016-01-20 10:42:19 +01:00
c2a1a02fe4
move user controller to core/controller
2016-01-20 10:23:57 +01:00
06fe4cabfc
move setup controller to core/controller
2016-01-20 10:23:57 +01:00
b97fe97875
move avatar controller to core/controller
2016-01-20 10:23:52 +01:00
f076bfac32
[tx-robot] updated from transifex
2016-01-20 01:54:54 -05:00
ffba6d0a7e
Added system tags GUI in sidebar
...
Added files details sidebar panel to assign/unassign/rename/delete
system tags.
2016-01-19 16:24:26 +01:00
8d41cbb97a
Implement toggleselect extension for select2
...
To make it possible to toggle selected values inside the dropdown
2016-01-19 16:24:26 +01:00
56184f799e
Make it possible to enable apps for groups only via occ
2016-01-19 14:29:12 +01:00
78a02d1b2f
Make it possible to disable apps via the console, which are not enabled for the current user
2016-01-19 14:29:01 +01:00
d2285113a8
Make sure to list "group enabled" apps as enabled
...
also when they are not enabled for the current user
2016-01-19 14:29:01 +01:00
6e096936e5
update JS humanFileSize to use KB instead of kB
2016-01-19 10:51:57 +01:00
50557b19b6
Run the command once again
2016-01-18 11:13:25 +01:00
fc08f71c12
Sort the list before saving
2016-01-18 11:13:09 +01:00
2095a31000
[tx-robot] updated from transifex
2016-01-17 01:54:53 -05:00
857c316bda
Backbone transport for Webdav
2016-01-16 11:28:04 +01:00
7a239b2642
[tx-robot] updated from transifex
2016-01-16 01:55:18 -05:00
4cbed04273
Merge pull request #21370 from owncloud/system-certs-occ
...
Add occ commands to manager trusted certificates
2016-01-15 14:18:01 +01:00
cd840f01ae
[tx-robot] updated from transifex
2016-01-15 01:54:57 -05:00
f2cb03e155
Allow array recursion in get
2016-01-14 15:02:55 +01:00
a06f0256a9
Allow deleting a nested system config value
2016-01-14 15:02:54 +01:00
00ab50defc
Retain backwards compatibility
2016-01-14 15:02:54 +01:00
b9d384d837
occ config:system:set can now set other value types
...
Integers, doubles, booleans and even arrays can now be set, with the
--type=... option. Array setting can be specified by passing multiple
name arguments, e.g. `./occ config:system:set redis port --value=123
--type=integer`
2016-01-14 15:02:54 +01:00
205fbcbfa3
[tx-robot] updated from transifex
2016-01-14 01:55:43 -05:00
c67a09112b
Add occ commands to manager trusted certificates
2016-01-13 14:35:37 +01:00
cc4e4ecf0f
Merge pull request #21676 from owncloud/fix-setup-login-input-shadows
...
fix login/setup page input shadows
2016-01-13 14:19:57 +01:00
3d4ec16a5f
Merge pull request #21659 from ErikPel/cssfix
...
Fixed #21542
2016-01-13 10:53:56 +01:00
b1ee51f255
Merge pull request #21630 from owncloud/add-some-security-headers-as-hardening
...
Add X-Download-Options and X-Permitted-Cross-Domain-Policies
2016-01-13 10:33:58 +01:00
af57fe59b9
Fixed #21542
...
Changed to 5 pixel
2016-01-13 11:18:59 +02:00
ee35cba7f1
fix login/setup page input shadows
...
fixes #21658
2016-01-13 10:06:21 +01:00
c5a200c419
Merge pull request #21653 from owncloud/update-license-headers-2016
...
Update license headers 2016
2016-01-13 08:29:42 +01:00
eb90fa78ad
[tx-robot] updated from transifex
2016-01-13 01:55:56 -05:00
682821c71e
Happy new year!
2016-01-12 15:02:18 +01:00
2493cfede9
Merge pull request #21640 from owncloud/add-config-to-disable-wellknown-check
...
Add config switch to disable the .well-known URL check
2016-01-12 14:46:09 +01:00
4d0dcd3c53
Add X-Download-Options and X-Permitted-Cross-Domain-Policies
...
Two small security hardenings for our IE users and those with Adobe products. Aligns it more with https://github.com/twitter/secureheaders#secureheaders---
2016-01-12 10:37:16 +01:00
8b6b042ffd
Add config switch to disable the .well-known URL check
2016-01-12 09:53:23 +01:00
a6c7cdd75e
Show the well-known URL check as info instead of error
...
* ref https://github.com/owncloud/core/pull/21562#issuecomment-170344549
2016-01-12 09:18:20 +01:00
3ec8789c77
Merge pull request #21628 from owncloud/deprecated_secure_random_funcions
...
Replace deprecated function calls to SecureRandom
2016-01-12 09:12:13 +01:00
44e91bb90a
[tx-robot] updated from transifex
2016-01-12 01:56:33 -05:00
876fb83ddc
getMediumStrengthGenerator is deprecated and does not do anything anymore
2016-01-11 20:06:30 +01:00
77a8085f84
[tx-robot] updated from transifex
2016-01-11 01:55:34 -05:00
580deb09f8
[tx-robot] updated from transifex
2016-01-10 01:55:57 -05:00
c5b2b3a124
Merge pull request #21562 from owncloud/properly-check-for-well-known-redirect
...
Add check for .well-known URL in the root of the webservers URL
2016-01-09 17:42:11 +01:00
72b34575df
[tx-robot] updated from transifex
2016-01-09 01:55:50 -05:00
0161928fc3
Add check for .well-known URL in the root of the webservers URL
...
* fixes #20012
2016-01-08 23:27:29 +01:00
dfbb24aa92
Merge pull request #21458 from owncloud/login-gradient
...
add back gradient for log in page in Firefox, fix accidental removal
2016-01-08 18:20:54 +01:00
756876b5dc
Merge pull request #21548 from owncloud/issue-21511-correctly-display-notify-option-for-shares
...
Check the correct config for displaying the "notify by email" option
2016-01-08 18:19:09 +01:00
334a6d57a3
Check the correct config for displaying the "notify by email" option
2016-01-08 14:15:06 +01:00
186e35d954
Verify the path is a file on avatar update
...
Fixes #21533
Before we just assumed that the passed path was a file. This does not
have to be the case. Thus check if it actually is a file before doing
any more tests.
2016-01-08 10:03:49 +01:00
88c4cba1f5
[tx-robot] updated from transifex
2016-01-08 01:56:39 -05:00
1cc6fddead
Merge pull request #21498 from owncloud/cleanup-OC_DB
...
Cleanup OC_DB methods
2016-01-07 20:13:16 +01:00
c55da1fc8d
Add a warning to the app:check-code if the version is missing
2016-01-07 15:04:36 +01:00
190cc2bb67
Remove OC_DB::getConnection
2016-01-07 14:54:55 +01:00
27dfa74d89
[tx-robot] updated from transifex
2016-01-07 01:55:48 -05:00
d3922510d0
Merge pull request #20994 from owncloud/personal-page
...
improve layout of personal settings page
2016-01-06 17:25:12 +01:00
b8ecf19650
Merge pull request #21349 from owncloud/web_use_sharee
...
Webinterface use sharee API
2016-01-06 17:24:52 +01:00
c77917f48c
[tx-robot] updated from transifex
2016-01-06 01:55:16 -05:00
d988685496
Merge pull request #21377 from owncloud/login-submit-button-border-2
...
Remove unnecessary border from login button
2016-01-05 15:13:06 +01:00
8f7ee523fe
add back gradient for log in page in Firefox, fix accidental removal
2016-01-05 10:44:10 +01:00
d4034ffca0
[tx-robot] updated from transifex
2016-01-05 01:57:14 -05:00
58b1221ad3
don't show previous log level in upgrade message
2016-01-04 11:50:07 +01:00
157bb50a39
[tx-robot] updated from transifex
2016-01-04 01:55:05 -05:00
970495a067
[tx-robot] updated from transifex
2015-12-31 01:55:16 -05:00
6bd15856b2
Added js tests for the Sharee API usage
2015-12-30 10:46:19 +01:00
49031e0744
Fix unit tests
2015-12-30 08:58:04 +01:00
f99fcd5dd6
Filter out share owner in sharee suggestion list
2015-12-30 08:58:04 +01:00
fa7996aa8a
Web sharing uses sharee endpoint
2015-12-30 08:58:04 +01:00
598883ffa0
Remove unnecessary border from login button
2015-12-29 09:32:40 +01:00
640adde3b9
improve layout of personal settings page
2015-12-28 18:50:50 +01:00
9c4ab51735
Merge pull request #21364 from owncloud/bring_back_icons_filepicker
...
Get the icon in javascript for the filepicker
2015-12-28 10:21:58 +01:00
245dac7e81
Merge pull request #20992 from owncloud/log-in-noselect
...
prevent selecting on log in page to solve ugliness on accidental selection
2015-12-28 10:18:30 +01:00
89584716f8
[tx-robot] updated from transifex
2015-12-28 01:55:10 -05:00
6fe60569f5
[tx-robot] updated from transifex
2015-12-27 01:54:38 -05:00
33a83a0926
[tx-robot] updated from transifex
2015-12-25 01:55:16 -05:00
1622589ac5
prevent selecting on log in page to solve ugliness on accidental selection
2015-12-24 11:01:31 +01:00
2fc458479e
[Avatars] Calculate 'sane' hue precissions
...
We used to get the numeric value of the entrire md5 string which is a
128bit integer. We would then devide this by the maxval of a 128bit int.
There is no need for such huge computations. As we just require a value
between 0 and 255. Thus using two 16 bit values is more than enough to
get the precision we need. By just taking the MSB we get nearly
identical results.
2015-12-24 10:50:12 +01:00
9be43e10af
Since the server no longer calculates the icon
...
The server no longer calculates the icon. So we have the js side do it
for us.
2015-12-24 08:59:32 +01:00
9cdc3f0558
[tx-robot] updated from transifex
2015-12-24 01:55:14 -05:00
cebeb0e052
Fix unit tests
...
Fixes https://github.com/owncloud/core/issues/21345
2015-12-23 09:11:22 +01:00
726f7e5fa8
[tx-robot] updated from transifex
2015-12-23 02:02:31 -05:00
83899a5fa1
add _blank to href
2015-12-21 13:28:32 -05:00
d0cb4c9ab3
[tx-robot] updated from transifex
2015-12-19 01:55:14 -05:00
ed98cdf532
Use OCP\Util::getVersion instead of the internal private implementation
2015-12-18 15:26:54 +01:00
551e553bf4
Merge pull request #21264 from owncloud/deprecated_oc_user_methods
...
Cleanup OC_User deprecated methods
2015-12-18 10:15:18 +01:00
c64e827f00
Since avatar.js is now essentially empty remove it
2015-12-17 16:32:18 +01:00
6248bad0f7
Add a default size to the avatar placeholders
...
This removed the need to do an avatar request on the "empty" row in the
user settings.
2015-12-17 16:30:23 +01:00
7e44ea5da0
Remove deprecated function OC_User::getManager
...
Private deprecated function => removed
Replaced all instances with suggested replacement
2015-12-17 16:18:34 +01:00
3bcaaa6c3a
Merge pull request #21259 from owncloud/load_big_avatar_only_personal
...
Only load the big (128x128) avatar on the perosnal page
2015-12-17 16:07:50 +01:00
1285b78086
Merge pull request #21200 from owncloud/files-authorizationheader
...
Use Authorization headers for public webdav in web UI
2015-12-17 15:30:13 +01:00
e3ed42135d
Merge pull request #21240 from owncloud/avatar_speedup
...
Avatar speedup
2015-12-17 14:43:21 +01:00
358b84c21d
Merge pull request #21253 from owncloud/deprecated_oc_helper_linkTo
...
Remove deprecated OC_Helper::linkTo
2015-12-17 14:43:02 +01:00
a81836a42f
Only load the big (128x128) avatar on the perosnal page
...
Before the code was executed on every page if a user was logged in. Now
only on the personal page. Thus saving a request on all other pages.
2015-12-17 13:55:22 +01:00
19eeb23b91
OC_Helper::linkTo is deprecated
...
Replaced with suggested (and calling body of)
2015-12-17 10:53:21 +01:00
fa983caeaa
Merge pull request #21238 from owncloud/files-fixparsewebdavmtime
...
Fix files UI mtime parsing from webdav
2015-12-17 10:24:36 +01:00
a7cd8103b5
[tx-robot] updated from transifex
2015-12-17 01:55:09 -05:00
3e80f14269
[Avatar] Make the avatar controller use the avatar node
2015-12-16 21:41:58 +01:00
181ba7b4e1
Fix files UI mtime parsing from webdav
2015-12-16 17:44:16 +01:00
595fd9de6e
Add davidchambers/base64 JS library
2015-12-14 17:48:30 +01:00
ab9849e72f
Use Authorization headers for public webdav instead of URL
...
Instead of prepending the token as username in the URL, use the
Authorization header instead. This is because IE9 considers this a
cross-domain call and refuses to do it in the first place.
2015-12-14 17:42:13 +01:00
583e696c9e
Merge pull request #21163 from owncloud/fix_20839
...
Files can't have create permissions
2015-12-14 10:25:27 +01:00
74de12c698
[tx-robot] updated from transifex
2015-12-13 01:54:51 -05:00
f2ac1a80d8
[tx-robot] updated from transifex
2015-12-12 01:55:39 -05:00
e8d5eb65c6
Files can't have create permissions
...
Fixes #20839
2015-12-11 22:28:26 +01:00
078ca149b5
[tx-robot] updated from transifex
2015-12-10 01:55:17 -05:00
b59285d0d0
Add occ command to get app path
2015-12-09 11:22:13 +01:00
d39b018893
Allow occ install on OS X - same behaviour as web setup
2015-12-09 10:49:54 +01:00
dda9525c4b
[tx-robot] updated from transifex
2015-12-09 01:55:14 -05:00
4b293dffe5
Use \OCP\Util::sanitizeHTML instead of \OC_Util::sanitizeHTML
2015-12-08 08:56:47 +01:00
d6276faff6
Merge pull request #21014 from owncloud/share-unsharelinkpapercut
...
Fix unshare link click element
2015-12-08 08:39:33 +01:00
736e133c04
[tx-robot] updated from transifex
2015-12-08 01:56:19 -05:00
b15d77c934
Merge pull request #21015 from owncloud/update-redirecttocorrectpage
...
Redirect to correct URL after updating
2015-12-07 19:55:45 +01:00
4100263bd6
Merge pull request #20996 from owncloud/issue-12215-remove-password-reset-when-not-possible
...
Issue 12215 remove password reset when not possible
2015-12-07 19:55:26 +01:00
69ab047f89
Redirect to correct URL after updating
...
Now requires a trailing slash to make sure we don't land on the
forbidden page.
2015-12-07 18:08:00 +01:00
5567b6cee2
Fix unshare link click element
...
When clicking on the unshare link (trash icon), the correct link element
needs to be used instead of whatever child was clicked. Then, that
element might contain a visible loading icon.
This fixes the spinner detection and also prevents a full page reload in
case the spinner was visible.
2015-12-07 17:58:17 +01:00
77958bb601
Merge pull request #21009 from owncloud/share-forbidlinkshare-duplicatefield
...
Fix duplicate bogus share field when link sharing is not allowed
2015-12-07 17:49:24 +01:00
939ba745ee
Merge pull request #20991 from owncloud/disabled-checked-checkbox-css-rules
...
Disabled checked checkbox css rules
2015-12-07 17:11:26 +01:00
6735005be0
Fix duplicate bogus share field when link sharing is not allowed
...
Whenever link share is not allowed, it was outputting a bogus sharing
field which name would conflict with the regular sharing field.
This fix makes sure that the bogus sharing field with "Resharing not
allowed" message only appears when triggered by removed share
permissions.
2015-12-07 16:53:56 +01:00
87bc02c6cd
Allow specifying a custom reset-password-url
2015-12-07 15:41:40 +01:00
f8f3c9ecf9
Remove password reset when the user can not change the password
2015-12-07 15:14:19 +01:00
57cd5209ca
Add rules for checked+disabled and disabled checkbox style
2015-12-07 14:57:03 +01:00
9c550a07ed
OC.FilePath has still a valid use case when generating paths to static files what for generateUrl cannot be used for - closes #15604
2015-12-07 12:23:42 +01:00
cd6bc79c40
Merge pull request #20530 from owncloud/icons-more
...
add icons for disabled checkbox, radio button, error and colored checkmark
2015-12-07 10:22:49 +01:00
30bd915c0e
Merge pull request #20480 from owncloud/css-prefixes
...
CSS prefixes
2015-12-07 10:21:35 +01:00
f3d49a89fe
Merge pull request #11131 from owncloud/use-phpini-wrapper
...
Replacing ini_get instances with inigetwrapper usages
2015-12-07 10:20:59 +01:00
884946276e
[tx-robot] updated from transifex
2015-12-07 01:54:35 -05:00
f0b1ba713d
[tx-robot] updated from transifex
2015-12-05 01:55:14 -05:00
50d862e5d1
[Avatars] JS should not load same avatar twice
...
Old code first dit an ajax request to the avatar. Then a new image
object with the same src was created and since we do not cache avatars
yet :( this resulted in 2 sequential requests to the exact same URL
Now if you set the displayname it will first set the placeholder and
then load the avatar in the background. Only once this time!
2015-12-04 10:42:11 +01:00
a2848af625
[tx-robot] updated from transifex
2015-12-04 01:56:31 -05:00
7fefd4f4d9
Merge pull request #20860 from owncloud/use-user-getEMailAddress-all-over-the-place
...
User IUser::getEMailAddress() all over the place
2015-12-03 09:21:53 +01:00
5c178a2719
[tx-robot] updated from transifex
2015-12-03 01:55:12 -05:00
eebe2b9c23
User IUser::getEMailAddress() all over the place
2015-12-02 21:25:05 +01:00
2515cb17be
Support pretty URLs
...
This changeset allows ownCloud to run with pretty URLs, they will be used if mod_rewrite and mod_env are available. This means basically that the `index.php` in the URL is not shown to the user anymore.
Also the not deprecated functions to generate URLs have been modified to support this behaviour, old functions such as `filePath` will still behave as before for compatibility reasons.
Examples:
http://localhost/owncloud/index.php/s/AIDyKbxiRZWAAjP => http://localhost/owncloud/s/AIDyKbxiRZWAAjP
http://localhost/owncloud/index.php/apps/files/ => http://localhost/owncloud/apps/files/
Due to the way our CSS and JS is structured the .htaccess uses some hacks for the final result but could be worse... And I was just annoyed by all that users crying for the removal of `index.php` ;-)
2015-12-01 16:46:07 +01:00
4971015544
Add code integrity check
...
This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository.
Furthermore, there is a basic implementation to display problems with the code integrity on the update screen.
Code signing basically happens the following way:
- There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release 😉 ). This certificate is not intended to be used for signing directly and only is used to sign new certificates.
- Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID.
- The command generates a signature.json file of the following format:
```json
{
"hashes": {
"/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d",
"/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9"
},
"certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF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\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----",
"signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl"
}
```
`hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`.
Steps to do in other PRs, this is already a quite huge one:
- Add nag screen in case the code check fails to ensure that administrators are aware of this.
- Add code verification also to OCC upgrade and unify display code more.
- Add enforced code verification to apps shipped from the appstore with a level of "official"
- Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release
- Add some developer documentation on how devs can request their own certificate
- Check when installing ownCloud
- Add support for CRLs to allow revoking certificates
**Note:** The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature:
```
➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt
Successfully signed "core"
```
Then increase the version and you should see something like the following:
As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen.
For packaging stable releases this requires the following additional steps as a last action before zipping:
1. Run `./occ integrity:sign-core` once
2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.
2015-12-01 11:55:20 +01:00
8421a43df1
[tx-robot] updated from transifex
2015-12-01 01:55:07 -05:00
42272de3a6
update bootstrap from 3.3.5 to 3.3.6
2015-11-30 14:12:57 +01:00
d8aa44d458
update backbone.js from 1.2.1 to 1.2.3
2015-11-30 14:12:48 +01:00
f3e9106864
Don't trust update server
...
In case the update server may deliver malicious content this would allow an adversary to inject arbitrary HTML into the response. So very bad stuff.
While signing the response would be better and something we can also do in the future (considering the code signing work), this is already a good first start.
2015-11-28 12:21:53 +01:00
d305412a35
[tx-robot] updated from transifex
2015-11-28 01:55:16 -05:00
67a83d8fd6
Add Workflow app to shipped list
2015-11-27 14:26:39 +01:00
39fb320bae
[tx-robot] updated from transifex
2015-11-27 01:55:14 -05:00
dd18ea611b
[tx-robot] updated from transifex
2015-11-26 01:55:22 -05:00
906aea4252
Merge pull request #19212 from owncloud/search-shortcut
...
Add Ctrl+F shortcut for the search bar
2015-11-25 20:02:13 +01:00
cd88854369
update page: fix heading whitespace and unbold less important sections
2015-11-25 13:16:00 +01:00
50780e451b
fix error page button text when label too long
2015-11-25 13:08:05 +01:00
b1ca431852
Fix for parsing pretty printed Webdav responses
...
Update davclient.js + adjust IE workaround for this
2015-11-24 15:26:53 +01:00
f1b0bf0696
add search fallback to browser
2015-11-24 15:01:20 +01:00
cb69e6c201
[tx-robot] updated from transifex
2015-11-24 01:56:32 -05:00
9caf4ffbfc
Replacing ini_get instances with inigetwrapper usages
2015-11-23 14:12:31 +01:00
bf672d7e51
Merge pull request #20222 from owncloud/federated_sharing_auto_complete
...
federated sharing auto-complete, first step
2015-11-23 10:42:14 +01:00
43391f8f47
Merge pull request #20623 from owncloud/app-list-enhancements
...
Add cmdline key to show shipped/non-shipped apps only
2015-11-23 10:07:52 +01:00
79bbda994b
Merge pull request #16902 from owncloud/jsocclient
...
Web UI uses Webdav instead of ajax/* calls
2015-11-23 09:38:01 +01:00
8d9353a640
Add cmdline key to show shipped/non-shipped apps only
2015-11-23 09:06:35 +01:00
b2d2b52eea
remove unneeded css prefixes
2015-11-23 09:03:54 +01:00
56e05a90af
[tx-robot] updated from transifex
2015-11-23 01:54:53 -05:00
a05e40932c
Now using IE8 workaround of davclient.js for all IE versions
2015-11-22 16:05:52 +01:00
fd40b06639
Patch for davclient.js for Firefox
2015-11-22 16:05:51 +01:00
7ec83fc9fb
Fix OC.FileInfo to copy all properties
...
This makes it possible to also store custom properties passed through
the data object like tags or shareOwner.
2015-11-22 16:05:50 +01:00
e8661a6b56
Update davclient.js
2015-11-22 16:05:52 +01:00
a1d0682ef8
Use oc:fileid property instead of oc:id
2015-11-22 16:05:51 +01:00
ab1d786d87
Fix port issue - options.host already has the port attached
2015-11-22 16:05:51 +01:00
dc8ce87a26
Query tags/favorite through Webdav in file list
2015-11-22 16:05:50 +01:00
fa2be0750c
Make files app use Webdav for most operations
2015-11-22 16:05:50 +01:00
f120846e29
Added OC.Files.Client Webdav-based files client
2015-11-22 16:05:49 +01:00
fb3d5c7856
Add evert's davclient.js + es6-promise + IE8 workaround
...
- Add davclient.js lib
- Add es6-promise required by that lib
- Wrote IE8 workaround lib/shim for davclient.js
2015-11-22 16:05:49 +01:00
2321cc4854
[tx-robot] updated from transifex
2015-11-22 01:54:53 -05:00
eb42340fa3
[tx-robot] updated from transifex
2015-11-21 01:54:59 -05:00
68a3a3ed6a
add new icon rules to icons.css
2015-11-20 14:43:23 +01:00
c4a100f535
add icons for checked+disabled checkbox and radio
2015-11-20 14:43:23 +01:00
cebf0037ea
compress action icons
2015-11-20 14:43:23 +01:00
b6e8a6e64f
add icons for disabled checkbox, radio button, error and colored checkmark
2015-11-20 14:43:23 +01:00
c5e41450f6
add federation to shipped.json
2015-11-19 18:07:03 +01:00
c10be07c1b
[tx-robot] updated from transifex
2015-11-19 01:55:13 -05:00
cd4380c322
[tx-robot] updated from transifex
2015-11-18 01:55:08 -05:00
56f44a457c
[tx-robot] updated from transifex
2015-11-17 01:55:08 -05:00
2784907782
password_policy is a shipped app
2015-11-16 16:36:12 +01:00
8169e4fdc8
Merge pull request #20465 from owncloud/forms.css
...
Move form styles from styles.css to inputs.css
2015-11-16 15:29:02 +01:00
9ea81b71f5
Merge pull request #20532 from owncloud/ocs-allow-v2
...
Allow creating OCS v2 links in JS
2015-11-16 15:15:53 +01:00
5b72d9026f
standardize sizes for headings
2015-11-16 14:42:10 +01:00
78c456b895
Allow creating OCS v2 links in JS
2015-11-16 14:23:43 +01:00
a03b1f1ee9
Merge pull request #20522 from owncloud/update-strengthify
...
Update strengthify to 0.4.2
2015-11-16 13:51:11 +01:00
b1abef77e4
Update strengthify to 0.4.2
...
* includes local changes (ported them to upstream - see #10625 )
* tipsy -> tooltip
* re-renders the element on scroll of a parent - fixes #20454
2015-11-16 11:16:38 +01:00
19d0884b56
[tx-robot] updated from transifex
2015-11-15 01:55:08 -05:00
1b409228ab
[tx-robot] updated from transifex
2015-11-14 01:55:13 -05:00
1e9203cdef
[tx-robot] updated from transifex
2015-11-13 01:57:12 -05:00
7ab56de58b
move form styles from styles.css to inputs.css
2015-11-13 00:19:57 +01:00
b167eb743f
Update untrustedDomain.php
2015-11-12 14:33:59 +01:00
089cd56e00
add Ctrl+F shortcut for the search bar
2015-11-12 12:37:31 +01:00
2479363492
Merge pull request #20148 from owncloud/checkbox-accessibility
...
Make new checkbox style accessible for screenreaders
2015-11-11 17:12:38 +01:00
5dd59b4bd2
[tx-robot] updated from transifex
2015-11-11 01:55:47 -05:00
dd153a5625
Merge pull request #20176 from owncloud/font-style
...
move font back from Light to Regular for body text, fix #18954
2015-11-10 17:52:09 +01:00
a2cd9708f6
Set "ie" CSS class for IE10, IE11
...
Fixed border in file action menu
2015-11-10 17:04:52 +01:00
83c177fc1b
move font back from Light to Regular for body text on normal-res screens, fix #18954
2015-11-10 16:12:42 +01:00
f8e020ff87
Merge pull request #20390 from owncloud/appcheckcode-no-duplicate-requirement
...
Do not allow two different version requirements
2015-11-10 00:27:05 +01:00
2e8d8bf4ef
Merge pull request #20236 from maprambo/safari-pinned-tab-icon
...
added Safari tabbed pin icon
2015-11-09 11:12:38 +01:00
fe04451cb1
Do not allow two different version requirements
2015-11-09 11:10:37 +01:00
f8637b6082
[tx-robot] updated from transifex
2015-11-08 01:55:13 -05:00
49122e66dd
[tx-robot] updated from transifex
2015-11-07 01:55:11 -05:00
164f4d7d37
Merge pull request #18039 from owncloud/favicon-up-to-ie10
...
Add favicon for IE8-10
2015-11-06 14:51:24 +01:00
d50924c59b
Mark files_drop as shipped
...
Fixes https://github.com/owncloud/enterprise/issues/895
2015-11-06 12:36:01 +01:00
93f9577258
do not bold header of update screen
2015-11-05 16:36:37 +01:00
2f4fa5b49c
[tx-robot] updated from transifex
2015-11-05 01:55:14 -05:00
edb1fee610
Added Safari tabbed pin icon
...
Added the necessary code and a black and inverted version of the favicon/ touch icon in svg format
2015-11-04 19:31:17 +01:00
c59ca9203d
Merge pull request #18821 from owncloud/global-classes
...
Global classes in core CSS
2015-11-04 10:30:10 +01:00
7fe047425f
[tx-robot] updated from transifex
2015-11-04 01:55:44 -05:00
069ed71dbe
Add favicon for IE 8+
2015-11-03 14:24:20 +01:00
cf0ebfc7aa
don't validate searchbox
2015-11-03 10:10:52 +01:00
82f3590fd0
[tx-robot] updated from transifex
2015-11-03 01:58:43 -05:00
0559b2092c
Merge pull request #20232 from owncloud/error-button-color
...
fix button text color
2015-11-02 21:48:50 +01:00
0a8cefaeb1
fix button text color
2015-11-02 17:58:37 +01:00
56b537271e
Global Classes for Core.
...
Move up the global styles up the hierarchy.
Adds Clear Left, Right and both.
New CSS file for Global Styles.
2015-11-02 20:54:02 +05:30
053effaa51
Merge pull request #20220 from owncloud/keep-search-open
...
Keep searchbox open if it is in action
2015-11-02 13:58:10 +01:00
9669a2be78
keep searchbox open if it is in action
2015-11-02 12:14:54 +01:00
f04151f69b
Close the user menu when clicking it again
2015-11-02 10:09:13 +01:00
2afc14e195
[tx-robot] updated from transifex
2015-11-02 01:55:05 -05:00
2374a0df5d
[tx-robot] updated from transifex
2015-11-01 01:54:58 -04:00
d7ed353814
[tx-robot] updated from transifex
2015-10-31 01:55:07 -04:00
6911d8f0a4
Merge pull request #20175 from owncloud/login-arrow
...
remove unneeded icons from input fields to not distract from submit button, fix #18940
2015-10-30 15:56:13 +01:00
2d9d59def7
Merge pull request #20171 from owncloud/tags.js-remove-unneeded-vars
...
[tags] remove unneeded variables
2015-10-30 15:30:25 +01:00
a05ea0fb1e
remove unneeded icons from input fields to not distract from submit button, fix #18940
2015-10-30 11:11:37 +01:00
b32e6fbb62
[tags] remove unneeded variables
2015-10-30 10:02:15 +01:00
f46d531a4f
Replace some OC_Config calls with ILogger methods
2015-10-30 09:51:16 +01:00
91b2cdc62b
[tx-robot] updated from transifex
2015-10-30 01:55:52 -04:00
d7efb6d8b5
Merge pull request #20152 from owncloud/LukasReschke-patch-1
...
Remove invalid type-cast
2015-10-29 16:44:31 +01:00
774d069ff0
Merge pull request #20122 from owncloud/files-consolidateiconupdate
...
Fix icon update to be more consistent
2015-10-29 15:40:15 +01:00
a6f180f24e
Remove invalid type-cast
...
This is an `is_array` operation and not a `in_array` one. Thus this typecast is not required.
Fixes https://github.com/owncloud/core/issues/20095
2015-10-29 15:19:02 +01:00
9234b8c194
make new checkbox style accessible for screenreaders
2015-10-29 13:23:57 +01:00
9c9158e6b7
Fix icon update to be more consistent
...
Makes the details bar show the same icon as in the list.
2015-10-29 12:59:51 +01:00
Vincent Petry
Joas Schilling
Jenkins for ownCloud
Thomas Müller
Morris Jobke
Lukas Reschke
Robin McCorkell
Robin Appelman
Erik Pellikka
Christoph Wurst
Roeland Jago Douma
Jörn Friedrich Dreyer
Jan-Christoph Borchardt
Björn Schießle
Renaud Fortier
Victor Dubiniuk
Hendrik Leppelsack
Clark Tomlinson
Jürgen Weigert
maprambo
Raghu Nayyar
