Commit Graph

33945 Commits

Author SHA1 Message Date
Lukas Reschke 7350e13113
Don't print exception message in HTML
The exception message is potentially influenced by user input and could thus be confusing (e.g. somebody could try to open a file like "Please send a mail to support@foo.com", and then the message would include that string.

It is thus reasonable to not show the exception message by default. Also for the browser view I added an `exit()` at the end, as otherwise the XML exception would be attached.
2016-09-09 14:16:17 +02:00
Lukas Reschke 68ab8325c7
Filter more mimetypes
There's no need to allow more than those defined mimetypes for images.
2016-09-09 12:36:28 +02:00
Roeland Jago Douma b9100da2e8 Merge pull request #1331 from nextcloud/osx-problems-stable10
[stable10] Fix OS X and OVH problems
2016-09-09 08:19:40 +02:00
Nextcloud bot de921ccd98
[tx-robot] updated from transifex 2016-09-09 00:09:38 +00:00
Lukas Reschke 2ae08d6fc2
Match only for actual session cookie
OVH has implemented load balancing in a very questionable way where the reverse proxy actually internally adds some cookies which would trigger a security exception. To work around this, this change only checks for the session cookie.
2016-09-08 21:07:05 +02:00
Lukas Reschke 1914e7082a
Add exemptions for incompatible UAs
Some user agents are notorious and don't really properly follow HTTP
 specifications. For those, have an automated opt-out. Since the protection
for remote.php is applied in base.php as starting point we need to opt out
here.
2016-09-08 21:06:57 +02:00
Morris Jobke 520bfa872b Merge pull request #1324 from nextcloud/backport-1323-show-download-button-for-updates-atm
[stable10] Show an download button instead of the updater
2016-09-08 15:41:45 +02:00
Morris Jobke 72fed6e8b8 Merge pull request #1322 from nextcloud/backport-1225-allow-to-validate-password-policy
Allow to validate the password_policy app
2016-09-08 15:36:03 +02:00
Morris Jobke 30a24b49f5 Merge pull request #1327 from nextcloud/set-quota-non-int-10
[10] fix setting quota to default or unlimited
2016-09-08 15:32:42 +02:00
Morris Jobke 8e5b2ce3b3 Merge pull request #1316 from nextcloud/backport-1311-add-docs-for-workflows
[stable10] Add a docs link when given
2016-09-08 14:08:52 +02:00
Roeland Jago Douma cfcadaea36 Merge pull request #1319 from nextcloud/backport-1243-fix-detection-of-file-types-a-bit
[stable10] Fix detection of file types a bit
2016-09-08 13:45:23 +02:00
Robin Appelman 38a0492c64
fix setting quota to default or unlimited 2016-09-08 12:58:42 +02:00
Joas Schilling 280a452055
Change updater URL 2016-09-08 12:29:37 +02:00
Morris Jobke a9184287e6 Merge pull request #1320 from nextcloud/backport-1301-fix-required-permissions-for-webdav-move-and-copy
[stable10] Fix required permissions for webdav move and copy
2016-09-08 12:13:18 +02:00
Joas Schilling a44c1c748c
Fix tests 2016-09-08 11:14:17 +02:00
Joas Schilling 292b95462e
Show an update button instead of the updater 2016-09-08 11:02:10 +02:00
Joas Schilling 69b063f4c6
Allow to validate the password_policy app 2016-09-08 09:56:48 +02:00
Joas Schilling 2e407732ba
Fix tests 2016-09-08 09:33:10 +02:00
Joas Schilling 42b9eed5dc
UPDATE permissions qualify for renaming a node 2016-09-08 09:33:01 +02:00
Joas Schilling 14299e44e2
Only require CREATE permissions when the file does not exist yet 2016-09-08 09:32:51 +02:00
Joas Schilling 5996983e28
Make mimetype also work for READ and DELETE operations 2016-09-08 09:21:26 +02:00
Joas Schilling d3a1fbd9eb
Better detection of mimetypes while uploading a zip on a mac 2016-09-08 09:21:00 +02:00
Joas Schilling 810f99c1c9
Correctly remove the charset from finfo mimetype 2016-09-08 09:20:34 +02:00
Joas Schilling 9de17c3785
Add a docs link when given 2016-09-08 08:57:54 +02:00
Nextcloud bot 8c4e5a923a
[tx-robot] updated from transifex 2016-09-08 00:10:28 +00:00
Marius Blüm d2c2f02cc2 Merge pull request #1312 from nextcloud/stable10-backport-1307
[stable10] Fix update notification
2016-09-07 23:44:17 +02:00
Morris Jobke 17dc2c344f
fix tests 2016-09-07 19:58:20 +02:00
Morris Jobke 12d077065c
Fix updater URL 2016-09-07 19:08:34 +02:00
Morris Jobke 86bbea9b8c
Fix layout of success message and text 2016-09-07 19:08:25 +02:00
Morris Jobke e83cb0bf56 Merge pull request #1305 from nextcloud/backport-1287-correctly-remove-admin-stuff
[stable10] Correctly remove admin sections and settings
2016-09-07 16:58:08 +02:00
Roeland Jago Douma 7c49ab4bb0 Merge pull request #1288 from nextcloud/backport-1284-allow-status.php-before-install
[stable10] Allow to call status.php before the instance is installed
2016-09-07 16:27:10 +02:00
Joas Schilling 28b00c5bea
Correctly remove admin sections and settings 2016-09-07 14:37:48 +02:00
Morris Jobke 2880a08747 Merge pull request #1299 from nextcloud/stable10-backport-1235
[stable10] Move navigation entries without order to the end
2016-09-07 13:41:22 +02:00
Joas Schilling 27f7416519
Move navigation entries without order to the end 2016-09-07 10:52:21 +02:00
Roeland Jago Douma 8324b6492d Merge pull request #1294 from nextcloud/stable10-backport-1292
[stable10] Add icon for the theming app
2016-09-07 10:20:30 +02:00
Felix Epp a28f000610
Add icon for the theming app 2016-09-07 08:34:01 +02:00
Nextcloud bot 9bd40755ef
[tx-robot] updated from transifex 2016-09-07 00:09:32 +00:00
Joas Schilling c01fd540be
Also fix "occ status" 2016-09-06 16:09:50 +02:00
Joas Schilling 1131140e69
Don't throw 500 when not installed 2016-09-06 16:09:36 +02:00
Joas Schilling 0a2b5b75de
Allow to call status.php before the instance is installed 2016-09-06 16:08:02 +02:00
Roeland Jago Douma e97bb2ccc5 Merge pull request #1280 from nextcloud/backport-1272-theming-info-capabilities
[stable10] Add theming information to capabilities for the client
2016-09-06 15:01:08 +02:00
Joas Schilling 9ac95be358
No background and logo in 10 2016-09-06 11:22:01 +02:00
Joas Schilling b626f710c1
php 5.4 and 5.5 compatibility 2016-09-06 11:19:08 +02:00
Joas Schilling ebaa49f76d
Add image URLs and tests 2016-09-06 11:10:27 +02:00
Joas Schilling 9f98cfceb4
Add theming information to capabilities for the client 2016-09-06 11:10:15 +02:00
Nextcloud bot e9d0520788
[tx-robot] updated from transifex 2016-09-06 00:09:25 +00:00
Nextcloud bot 1193d8d1b4
[tx-robot] updated from transifex 2016-09-05 00:09:16 +00:00
Nextcloud bot c5f2917e1a
[tx-robot] updated from transifex 2016-09-04 00:09:28 +00:00
Nextcloud bot d928d47fb6
[tx-robot] updated from transifex 2016-09-03 00:09:30 +00:00
Nextcloud bot 4849538c70
[tx-robot] updated from transifex 2016-09-02 00:09:17 +00:00