Go to file

Lukas Reschke f3ab4f3faf Don't disclose relative directory path for single shared files of user The "dir" key is used within the public sharing template to indicate in which directory the user currently is when sharing a directory with subdirectories. This is needed by the JS scripts. However, when not accessing a directory then "dir" was set to the relative path of the file (from the user's home directory), meaning that for every public shared file the sharee can see the path. (For example if you share the file "foo.txt" from "finances/topsecret/" the sharee would still see the path "finances/topsecret/" from the shared HTML template) This is not the excpected behaviour and can be considered a privacy problem, this patch addresses this by setting "dir" to an empty key.		2014-11-18 18:51:57 +01:00
.idea	Upgrade SabreDAV to 1.8.10	2014-06-04 12:22:23 +02:00
3rdparty@912a45c345	bower strengthify	2014-11-06 16:29:34 +01:00
apps	Don't disclose relative directory path for single shared files of user	2014-11-18 18:51:57 +01:00
build	Revert "Travis support"	2014-09-22 16:34:50 +02:00
config	Merge pull request #11917 from owncloud/fix-11909	2014-11-11 20:37:50 +01:00
core	[tx-robot] updated from transifex	2014-11-17 01:54:33 -05:00
l10n	Remove *.pot	2014-11-10 11:33:20 +01:00
lib	Merge pull request #12224 from owncloud/fix_12211	2014-11-18 17:26:02 +01:00
ocs	Return 503 OCS response with requested format	2014-06-30 15:37:38 +02:00
search	Merge pull request #11831 from owncloud/make-search-non-blocking	2014-10-29 15:29:28 +01:00
settings	[tx-robot] updated from transifex	2014-11-17 01:54:33 -05:00
tests	use the new base class for unit tests	2014-11-18 11:46:28 +01:00
themes	Gitorious => Github	2012-08-26 02:39:42 +03:00
.bowerrc	ability to add bower resources	2014-11-03 20:54:40 +01:00
.gitignore	Added script to build the JS documentation	2014-10-31 13:27:36 +01:00
.gitmodules	use https as submodule url	2014-03-21 19:38:22 +01:00
.htaccess	adding cache control headers for css and js - fixes #11496	2014-10-14 06:36:53 +02:00
.jshintrc	enable laxbreak option in jshintrc to comply with our coding guide lines	2014-11-04 12:51:54 +01:00
.scrutinizer.yml	Migrate multiselect to user_ldap	2014-11-13 00:47:14 +01:00
.user.ini	Create .user.ini for PHP-FPM	2014-09-10 16:08:40 +02:00
AUTHORS	Add myself as author	2014-09-19 17:24:12 +02:00
CONTRIBUTING.md	Update music repo	2014-08-20 09:50:00 +02:00
COPYING-AGPL	Really add AGPL file	2011-02-09 15:12:09 +00:00
COPYING-README	correct icon license, we use Elementary icons, not Silk anymore	2014-07-15 11:35:49 +02:00
README.md	Add CodeClimate indicator	2014-10-31 13:52:14 +01:00
autotest-js.sh	remove 'set -e' - causes issues during ci execution	2014-09-12 15:42:50 +02:00
autotest.cmd	no external files on windows for now	2014-08-22 10:01:33 +02:00
autotest.sh	this allows a non-existant config/config.php for starting the autotest.sh	2014-11-13 11:58:09 +01:00
bower.json	bower strengthify	2014-11-06 16:29:34 +01:00
buildjsdocs.sh	Added script to build the JS documentation	2014-10-31 13:27:36 +01:00
console.php	Do not load apps when an upgrade is due	2014-07-24 16:53:30 +02:00
cron.php	Use the TempManager to handle temporary files	2014-10-24 12:18:49 +02:00
db_structure.xml	Revert "add share index"	2014-07-17 20:56:06 +02:00
index.html	Try to prefer index.php over index.html in the same directory	2013-04-24 15:11:53 +02:00
index.php	Make files non executable	2014-10-24 11:14:51 +02:00
indie.json	add indie.json for Indie App Store listing	2014-06-29 22:03:24 +02:00
issue_template.md	Removed quota question	2014-02-17 14:34:15 +01:00
occ	adding executable script occ (ownCloud console)	2013-08-05 14:03:11 +02:00
public.php	Add sabredav plugin to check if a user has access to an app	2014-11-17 15:50:24 +01:00
remote.php	Add sabredav plugin to check if a user has access to an app	2014-11-17 15:50:24 +01:00
robots.txt	Add robot.txt	2013-01-28 16:39:53 -06:00
status.php	Refresh if maintenance mode is over	2014-09-09 17:26:11 +02:00
version.php	Increment version	2014-09-03 14:21:35 +02:00