3adbfbfd69
Use / instead of an empty string as cookie path
...
When an empty string is used as cookie path PHP will assign the current directory as cookie path.
This means when an user had installed an ownCloud under "/", which is mapped to an empty string in \OC::$WEBROOT, and accessed it the cookie was set to values such as "/index.php/apps/files" since the web browser assumed this to be a directory. This means that multiple encryption cookies were set for the same domain resulting in potential havoc.
With this patch the path will be set to "/" in case an empty web root is installed which makes the cookie accessible to the whole domain.
To test this setup multiple ownCloud instances on the same domain under different ports and have both installed under "/", then try to login in both of it and previously this can in some cases lead to a lockout of the user.
Note that this affects the cookies that the browsers do sent and thus to test this you need to clear all cookies from your browser previously. I consider this an acceptable behaviour for now since this code is only in master.
Fixes https://github.com/owncloud/core/issues/18919
2015-09-14 11:22:34 +02:00
211a243784
[tx-robot] updated from transifex
2015-09-14 01:55:35 -04:00
fd74522804
make resolve public to avoid boiler plate code
...
add resolve to public interface
2015-09-13 17:44:24 +02:00
7562e4959b
Merge pull request #18658 from owncloud/configurable-temp
...
Configurable temporary directory
2015-09-12 22:04:41 +02:00
9860a79441
[tx-robot] updated from transifex
2015-09-12 01:55:35 -04:00
1924dd348a
Merge pull request #18653 from owncloud/dav-stream-guzzle
...
stream webdav downloads using http client
2015-09-11 17:10:10 +02:00
188d0e09b8
Add reset method to mimetype loader
...
Used to solve concurrency issues
2015-09-11 12:44:53 +01:00
e99988b9c7
Merge pull request #18676 from owncloud/ext-eventdispatcher
...
files_external event dispatcher
2015-09-11 09:34:05 +01:00
620173c792
Merge pull request #18851 from owncloud/memcached-getallkeys-fallback
...
Fallback to complete Memcached flush if getAllKeys fails
2015-09-10 20:33:18 +01:00
fb717f254f
Merge pull request #18699 from owncloud/notification-manager
...
Notification manager
2015-09-10 15:26:36 +02:00
89cd929560
Merge pull request #17791 from owncloud/make-eventsource-compatible-with-win10
...
Add custom CSP for Win 10 compatibility
2015-09-10 15:00:35 +02:00
0b91087489
Write to session in batch at the end of the request
2015-09-09 12:48:37 +02:00
e579dd62fd
Write session data to single key
...
This prevents decrypting values multiple times.
2015-09-09 12:48:08 +02:00
bfa26db472
Use md5 over the version file to prevent cyclyc dependency
2015-09-09 12:48:08 +02:00
c4c9c5ffad
Merge pull request #18684 from owncloud/explicit-upgrade-version
...
Explicit upgrade version + prevent downgrades
2015-09-09 11:08:55 +02:00
acee9d4750
Merge pull request #18908 from owncloud/allow-0-as-password
...
Allow 0 and false as password
2015-09-09 10:29:29 +02:00
bf01c3d72a
[tx-robot] updated from transifex
2015-09-09 01:54:49 -04:00
a03422c55a
Cache generated result
...
Saves 50ms
2015-09-08 21:28:15 +02:00
7cbf2bc56d
Allow 0 and false as password
...
When we use the check for "empty" here passwords such as 0 will not work.
Fixes https://github.com/owncloud/password_policy/issues/8
2015-09-08 17:53:29 +02:00
73d3839962
Merge pull request #18881 from owncloud/kill-sendfile
...
Remove XSendFile support
2015-09-08 14:02:12 +02:00
38001d824b
Move interfaces to private until they are no longer experimental
2015-09-08 09:01:02 +02:00
190d2c3d5b
Add tests for the notification manager
2015-09-08 09:01:02 +02:00
c6469be8bd
Add tests for notification
2015-09-08 09:01:02 +02:00
acf8149f17
Add tests for Action
2015-09-08 09:01:01 +02:00
0d154595f8
Fix the subject of notifications
2015-09-08 09:01:01 +02:00
57c273b2da
Fix closures and adding parsed Actions
2015-09-08 09:01:01 +02:00
d04021b1ac
Fix the request type and the validity
2015-09-08 09:01:01 +02:00
21b83dc730
Allow getting the request type
2015-09-08 09:01:01 +02:00
913e2e9ae6
Use an INotification to getCount() and markProcessed()
2015-09-08 09:01:01 +02:00
3bdfef9107
Add the request type to the action
2015-09-08 09:01:01 +02:00
f0ecfa6e6c
Add the app id to the markProcessed method
2015-09-08 09:01:01 +02:00
0bcae89d14
Handle InvalidArgumentException more gracefully
2015-09-08 09:01:01 +02:00
f16c5a38a8
Add language to the preparation method
2015-09-08 09:01:01 +02:00
5437aeeaa2
Nothing is set in stone here yet
2015-09-08 09:01:01 +02:00
4e347170ac
Notification API
2015-09-08 09:00:57 +02:00
d044884cfa
[tx-robot] updated from transifex
2015-09-08 01:55:56 -04:00
84797023ed
Remove XSendFile support
...
Required to ensure proper locking
2015-09-07 16:52:50 +02:00
c57595bcb4
Merge pull request #18839 from owncloud/autoloader-supersecure
...
Restrict autoloaded paths to loaded apps (and other enhancements)
2015-09-07 00:09:00 +02:00
24f5f50b20
Merge pull request #18742 from owncloud/mimetype-updatedb
...
Introduce mimetype DB update occ command
2015-09-06 16:56:35 +02:00
3642fb701a
[tx-robot] updated from transifex
2015-09-06 01:54:56 -04:00
b64e3f8db6
Fallback to complete Memcached flush if getAllKeys fails
...
Newer Memcached's do not support the underlying protocol commands that
getAllKeys() is implemented with. We should fallback to clearing
everything in that case, as causing (temporary) performance problems for
other applications on the server is better than having stale cached data.
2015-09-05 20:02:49 +01:00
0fac2e3f3a
Unique exception for invalid autoload paths, better handling
...
Background jobs are tolerant of stale entries left by disabled apps,
which will cause an autoload exception.
2015-09-05 16:50:02 +01:00
895e633732
Resolve autoloader valid roots before checking
...
Allows symlinked app directories to work properly
2015-09-05 00:04:59 +01:00
b3acf09c60
Only add valid root for enabled apps
2015-09-05 00:04:58 +01:00
cdf01f0419
Split mimetype handling to new class
2015-09-04 17:28:20 +01:00
7f8bca64cb
Merge pull request #18833 from owncloud/share-prevent-twice
...
Prevent sharing twice with user when already a group
2015-09-04 18:26:50 +02:00
f100ef0fc6
Prevent sharing twice with user when already a group
2015-09-04 16:22:01 +02:00
3bc287ff63
Merge pull request #18794 from individual-it/reuse_systemConfig
...
reuse existing $systemConfig variable
2015-09-04 14:03:56 +05:45
4100b151cc
[tx-robot] updated from transifex
2015-09-04 01:55:31 -04:00
e54513cddd
Merge pull request #18799 from owncloud/appconfig-with-one-request
...
Only query the appconfig once per request
2015-09-03 16:13:14 +02:00
Lukas Reschke
Jenkins for ownCloud
Bernhard Posselt
Frank Karlitschek
Robin McCorkell
Morris Jobke
Björn Schießle
Joas Schilling
Roeland Douma
Vincent Petry
Individual IT Services