nextcloud/lib/private
Lukas Reschke 7cb0df28e2
Prevent downgrade attacks for apps
We should verify the app versions when installing a new update, otherwise this could result in downgrade attacks when an attacker just copies the old signature.

Plus it prevents the case that in case of a bug in the appstore actually an older version gets installed.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-11-11 18:53:26 +01:00
..
Activity Fix others 2016-07-21 18:13:57 +02:00
App Add update support 2016-10-31 17:17:47 +01:00
AppFramework bring back remember-me 2016-11-02 13:39:16 +01:00
Archive Move to non-static version 2016-10-31 18:42:19 +01:00
Authentication document what the method does 2016-11-02 17:42:46 +01:00
BackgroundJob Update with robin 2016-07-21 18:13:58 +02:00
Cache Cap the number of queries we save in the query logger 2016-11-03 16:00:28 +01:00
Command Update with robin 2016-07-21 18:13:58 +02:00
Comments resolve displayname via manager and registerable resolvers 2016-10-19 00:34:00 +02:00
Console add upgrade command before repair, handle NeedsUpgradeExcaption better 2016-10-24 17:52:49 +02:00
DB Inject config and logger 2016-11-02 20:30:37 +01:00
Diagnostics Cap the number of queries we save in the query logger 2016-11-03 16:00:28 +01:00
Encryption Fix shared storage namespace in DecryptAll class 2016-10-20 20:36:50 +02:00
Files Merge pull request #2015 from nextcloud/swift-bucket 2016-11-04 21:46:59 +01:00
Group Update with robin 2016-07-21 18:13:58 +02:00
Hooks Update with robin 2016-07-21 18:13:58 +02:00
Http/Client Update with robin 2016-07-21 18:13:58 +02:00
IntegrityCheck Make sure memory limit is > post size and upload filesize 2016-09-13 16:50:36 +02:00
L10N Simplify isSubDirectory check 2016-10-07 21:56:43 +02:00
Lock Update with robin 2016-07-21 18:13:58 +02:00
Log log version number in each log line 2016-10-06 12:42:46 +02:00
Mail Fix others 2016-07-21 18:13:57 +02:00
Memcache Activate APCu on PHP 7 2016-09-01 12:30:05 +02:00
Migration Fix others 2016-07-21 18:13:57 +02:00
Notification Use a php class for the definitions to avoid loading problems 2016-11-09 08:52:07 +01:00
OCS Remove unused private classes 2016-08-18 09:37:11 +02:00
Preview Added genertor helper & tests 2016-11-03 14:00:33 +01:00
Repair Use callForSeenUsers for avatar migration 2016-10-28 08:44:05 +02:00
RichObjectStrings Add test and adjust PHP function arguments 2016-11-09 10:49:57 +01:00
Route Allow OCS routes in Core and Settings 2016-08-09 20:56:31 +02:00
Search Fix others 2016-07-21 18:13:57 +02:00
Security Fix missing update of session, when it was already used. 2016-11-02 20:30:36 +01:00
Session Update with robin 2016-07-21 18:13:58 +02:00
Settings Show a hint for system based cron user name 2016-11-03 10:38:00 +01:00
Setup Added Exception catch in case of DB User exists 2016-10-31 16:32:22 +05:30
Share Remove adding sharedialogmailview 2016-11-04 07:41:35 +01:00
Share20 add activity if a file was shared by mail 2016-11-08 15:58:52 +01:00
SystemTag Fix others 2016-07-21 18:13:57 +02:00
Tagging Fix others 2016-07-21 18:13:57 +02:00
Template Missing returns + autoloader file 2016-10-25 22:13:09 +02:00
Updater Use the same URL everywhere 2016-09-27 14:52:22 +02:00
User inject ISecureRandom into user session and use injected config too 2016-11-02 13:39:16 +01:00
legacy Fix preview URLs 2016-11-08 16:39:13 +01:00
AllConfig.php Use cache to determine if value need to be updated 2016-10-13 19:40:40 +02:00
AppConfig.php Update with robin 2016-07-21 18:13:58 +02:00
AppHelper.php Fix others 2016-07-21 18:13:57 +02:00
Avatar.php Add message to NotSquareException thrown from Avatar 2016-10-24 11:27:27 +02:00
AvatarManager.php avatar to appdata 2016-10-05 11:00:16 +02:00
CapabilitiesManager.php Make the capabilities manager more error proof 2016-08-15 20:37:19 +02:00
Config.php Update with robin 2016-07-21 18:13:58 +02:00
ContactsManager.php Fix others 2016-07-21 18:13:57 +02:00
DatabaseException.php Fix others 2016-07-21 18:13:57 +02:00
DatabaseSetupException.php Fix others 2016-07-21 18:13:57 +02:00
DateTimeFormatter.php Fix others 2016-07-21 18:13:57 +02:00
DateTimeZone.php Fix others 2016-07-21 18:13:57 +02:00
ForbiddenException.php Fix others 2016-07-21 18:13:57 +02:00
HTTPHelper.php Fix others 2016-07-21 18:13:57 +02:00
HintException.php Fix others 2016-07-21 18:13:57 +02:00
Installer.php Prevent downgrade attacks for apps 2016-11-11 18:53:26 +01:00
LargeFileHelper.php Merge pull request #1890 from nextcloud/downstream-25428 2016-10-25 14:44:27 +02:00
Log.php Default to empty string 2016-10-07 16:23:05 +02:00
NaturalSort.php Fix others 2016-07-21 18:13:57 +02:00
NaturalSort_DefaultCollator.php Fix others 2016-07-21 18:13:57 +02:00
NavigationManager.php Fix others 2016-07-21 18:13:57 +02:00
NeedsUpdateException.php Update with robin 2016-07-21 18:13:58 +02:00
NotSquareException.php Fix others 2016-07-21 18:13:57 +02:00
Preview.php New preview generator 2016-11-03 14:00:32 +01:00
PreviewManager.php Added genertor helper & tests 2016-11-03 14:00:33 +01:00
PreviewNotAvailableException.php Opening the trashbin causes errors in log for files without preview 2016-09-09 13:53:06 +02:00
RedisFactory.php Update with robin 2016-07-21 18:13:58 +02:00
Repair.php Ignore failures of collation change in the pre update step 2016-10-19 00:15:01 +02:00
RepairException.php Fix others 2016-07-21 18:13:57 +02:00
Search.php Update with robin 2016-07-21 18:13:58 +02:00
Server.php Get correct L10N for Settings Manager 2016-11-10 11:08:37 +01:00
ServerContainer.php Save the container with the app's namespace so we can resolve it 2016-08-22 14:25:43 +02:00
ServerNotAvailableException.php Fix others 2016-07-21 18:13:57 +02:00
ServiceUnavailableException.php Update with robin 2016-07-21 18:13:58 +02:00
Setup.php Update docs 2016-09-13 10:51:48 +02:00
Streamer.php Fix others 2016-07-21 18:13:57 +02:00
SubAdmin.php Fix others 2016-07-21 18:13:57 +02:00
SystemConfig.php Fix others 2016-07-21 18:13:57 +02:00
TagManager.php Fix others 2016-07-21 18:13:57 +02:00
Tags.php Update with robin 2016-07-21 18:13:58 +02:00
TempManager.php Update with robin 2016-07-21 18:13:58 +02:00
TemplateLayout.php Move away from OC_L10N 2016-10-28 21:46:28 +02:00
URLGenerator.php Make sure we try to autoload the class 2016-07-22 16:49:33 +02:00
Updater.php Use a better error message and point the users to the support channels 2016-11-09 09:10:32 +01:00