2ae08d6fc2
Match only for actual session cookie
...
OVH has implemented load balancing in a very questionable way where the reverse proxy actually internally adds some cookies which would trigger a security exception. To work around this, this change only checks for the session cookie.
2016-09-08 21:07:05 +02:00
1914e7082a
Add exemptions for incompatible UAs
...
Some user agents are notorious and don't really properly follow HTTP
specifications. For those, have an automated opt-out. Since the protection
for remote.php is applied in base.php as starting point we need to opt out
here.
2016-09-08 21:06:57 +02:00
520bfa872b
Merge pull request #1324 from nextcloud/backport-1323-show-download-button-for-updates-atm
...
[stable10] Show an download button instead of the updater
2016-09-08 15:41:45 +02:00
72fed6e8b8
Merge pull request #1322 from nextcloud/backport-1225-allow-to-validate-password-policy
...
Allow to validate the password_policy app
2016-09-08 15:36:03 +02:00
30a24b49f5
Merge pull request #1327 from nextcloud/set-quota-non-int-10
...
[10] fix setting quota to default or unlimited
2016-09-08 15:32:42 +02:00
8e5b2ce3b3
Merge pull request #1316 from nextcloud/backport-1311-add-docs-for-workflows
...
[stable10] Add a docs link when given
2016-09-08 14:08:52 +02:00
cfcadaea36
Merge pull request #1319 from nextcloud/backport-1243-fix-detection-of-file-types-a-bit
...
[stable10] Fix detection of file types a bit
2016-09-08 13:45:23 +02:00
38a0492c64
fix setting quota to default or unlimited
2016-09-08 12:58:42 +02:00
280a452055
Change updater URL
2016-09-08 12:29:37 +02:00
a9184287e6
Merge pull request #1320 from nextcloud/backport-1301-fix-required-permissions-for-webdav-move-and-copy
...
[stable10] Fix required permissions for webdav move and copy
2016-09-08 12:13:18 +02:00
a44c1c748c
Fix tests
2016-09-08 11:14:17 +02:00
292b95462e
Show an update button instead of the updater
2016-09-08 11:02:10 +02:00
69b063f4c6
Allow to validate the password_policy app
2016-09-08 09:56:48 +02:00
2e407732ba
Fix tests
2016-09-08 09:33:10 +02:00
42b9eed5dc
UPDATE permissions qualify for renaming a node
2016-09-08 09:33:01 +02:00
14299e44e2
Only require CREATE permissions when the file does not exist yet
2016-09-08 09:32:51 +02:00
5996983e28
Make mimetype also work for READ and DELETE operations
2016-09-08 09:21:26 +02:00
d3a1fbd9eb
Better detection of mimetypes while uploading a zip on a mac
2016-09-08 09:21:00 +02:00
810f99c1c9
Correctly remove the charset from finfo mimetype
2016-09-08 09:20:34 +02:00
9de17c3785
Add a docs link when given
2016-09-08 08:57:54 +02:00
8c4e5a923a
[tx-robot] updated from transifex
2016-09-08 00:10:28 +00:00
d2c2f02cc2
Merge pull request #1312 from nextcloud/stable10-backport-1307
...
[stable10] Fix update notification
2016-09-07 23:44:17 +02:00
17dc2c344f
fix tests
2016-09-07 19:58:20 +02:00
12d077065c
Fix updater URL
2016-09-07 19:08:34 +02:00
86bbea9b8c
Fix layout of success message and text
2016-09-07 19:08:25 +02:00
e83cb0bf56
Merge pull request #1305 from nextcloud/backport-1287-correctly-remove-admin-stuff
...
[stable10] Correctly remove admin sections and settings
2016-09-07 16:58:08 +02:00
7c49ab4bb0
Merge pull request #1288 from nextcloud/backport-1284-allow-status.php-before-install
...
[stable10] Allow to call status.php before the instance is installed
2016-09-07 16:27:10 +02:00
28b00c5bea
Correctly remove admin sections and settings
2016-09-07 14:37:48 +02:00
2880a08747
Merge pull request #1299 from nextcloud/stable10-backport-1235
...
[stable10] Move navigation entries without order to the end
2016-09-07 13:41:22 +02:00
27f7416519
Move navigation entries without order to the end
2016-09-07 10:52:21 +02:00
8324b6492d
Merge pull request #1294 from nextcloud/stable10-backport-1292
...
[stable10] Add icon for the theming app
2016-09-07 10:20:30 +02:00
a28f000610
Add icon for the theming app
2016-09-07 08:34:01 +02:00
9bd40755ef
[tx-robot] updated from transifex
2016-09-07 00:09:32 +00:00
c01fd540be
Also fix "occ status"
2016-09-06 16:09:50 +02:00
1131140e69
Don't throw 500 when not installed
2016-09-06 16:09:36 +02:00
0a2b5b75de
Allow to call status.php before the instance is installed
2016-09-06 16:08:02 +02:00
e97bb2ccc5
Merge pull request #1280 from nextcloud/backport-1272-theming-info-capabilities
...
[stable10] Add theming information to capabilities for the client
2016-09-06 15:01:08 +02:00
9ac95be358
No background and logo in 10
2016-09-06 11:22:01 +02:00
b626f710c1
php 5.4 and 5.5 compatibility
2016-09-06 11:19:08 +02:00
ebaa49f76d
Add image URLs and tests
2016-09-06 11:10:27 +02:00
9f98cfceb4
Add theming information to capabilities for the client
2016-09-06 11:10:15 +02:00
e9d0520788
[tx-robot] updated from transifex
2016-09-06 00:09:25 +00:00
1193d8d1b4
[tx-robot] updated from transifex
2016-09-05 00:09:16 +00:00
c5f2917e1a
[tx-robot] updated from transifex
2016-09-04 00:09:28 +00:00
d928d47fb6
[tx-robot] updated from transifex
2016-09-03 00:09:30 +00:00
4849538c70
[tx-robot] updated from transifex
2016-09-02 00:09:17 +00:00
1b4cbba376
Merge pull request #1231 from nextcloud/backport-1224-do-not-allow-linebreak-in-paths
...
[stable10] Do not allow linebreaks and null bytes in paths
2016-09-01 14:07:10 +02:00
df50e967db
Add PhantomJS to gitignore
2016-09-01 12:45:38 +02:00
c3ae21fef2
Also prevent null byte character
2016-09-01 12:45:31 +02:00
ed0f0db5fa
Filter out %0A from paths
2016-09-01 12:45:19 +02:00
Lukas Reschke
Morris Jobke
Roeland Jago Douma
Robin Appelman
Joas Schilling
Nextcloud bot
Marius Blüm
Felix Epp