Robin Appelman
078f65645c
dont use part files for dav writes when the target folder doesn't have create permissions
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2019-08-08 09:00:29 +07:00
Nextcloud bot
7dc8425c16
[tx-robot] updated from transifex
2019-08-08 02:14:58 +07:00
Nextcloud bot
dac0b7e088
[tx-robot] updated from transifex
2019-08-07 02:14:51 +07:00
Nextcloud bot
09f18f1bf1
[tx-robot] updated from transifex
2019-08-06 02:14:51 +07:00
Nextcloud bot
30a413d09c
[tx-robot] updated from transifex
2019-08-05 02:14:40 +07:00
Nextcloud bot
4d7a877277
[tx-robot] updated from transifex
2019-08-04 02:15:35 +07:00
Nextcloud bot
f255674143
[tx-robot] updated from transifex
2019-08-03 02:14:47 +07:00
Nextcloud bot
130c4b9b5b
[tx-robot] updated from transifex
2019-08-02 02:14:45 +07:00
blizzz
c8e6a3520c
Merge pull request #16631 from nextcloud/backport/16624/stable15
...
[stable15] Make sure we only fetch the file by id for the actual owner
2019-08-01 22:48:04 +07:00
Julius Härtl
516da1f5a2
Make sure we only fetch the file by id for the actual owner
...
Otherwise this will fetch all mounts for the file id which is quite
expensive and causes long saving times in big sharing structures
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2019-08-01 13:02:49 +07:00
Nextcloud bot
fbf3a189a1
[tx-robot] updated from transifex
2019-08-01 02:15:42 +07:00
Roeland Jago Douma
74b4efcf73
Merge pull request #16608 from nextcloud/backport/stable15/16596
...
[stable15] Set proper defaults for v-tooltip usages
2019-07-31 08:33:52 +07:00
Nextcloud bot
d140264828
[tx-robot] updated from transifex
2019-07-31 02:16:19 +07:00
Roeland Jago Douma
862ca2134c
Merge pull request #16611 from nextcloud/backport/16599/stable15
...
[stable15] Fix/xss/on favorite file
2019-07-30 16:30:32 +07:00
Max Fichtelmann
cadd6fa929
prevent potential XSS via unchecked use innerHTML
...
Signed-off-by: Max Fichtelmann <max.fichtelmann@procilon.de>
2019-07-30 07:53:24 +07:00
Max Fichtelmann
46a8af58c9
fix XSS when adding a file with a malicious name to favorites
...
Signed-off-by: Max Fichtelmann <max.fichtelmann@procilon.de>
2019-07-30 07:53:23 +07:00
Julius Härtl
058f88d444
Bump bundles
...
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2019-07-30 08:57:48 +07:00
Julius Härtl
37814333a5
Force defaultHtml setting of v-tooltip to be disabled
...
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2019-07-30 08:53:19 +07:00
Nextcloud bot
792d8fbdcc
[tx-robot] updated from transifex
2019-07-30 02:15:00 +07:00
Nextcloud bot
33154b8c92
[tx-robot] updated from transifex
2019-07-29 02:15:14 +07:00
Nextcloud bot
d6c81fd3b8
[tx-robot] updated from transifex
2019-07-28 02:15:40 +07:00
Roeland Jago Douma
c7b8906c15
Merge pull request #16565 from nextcloud/backport/16555/stable15
...
[stable15] use a pattern to identify sensitive config keys
2019-07-27 10:38:09 +07:00
Roeland Jago Douma
1156d16b60
Merge pull request #16568 from nextcloud/backport/16163/stable15
...
[stable15] Change send to sent
2019-07-27 10:37:39 +07:00
Nextcloud bot
b8adf73612
[tx-robot] updated from transifex
2019-07-27 02:14:52 +07:00
Frederic Werner
60deb5f69c
Change send to sent
...
Signed-off-by: Frederic Werner <frederic-github@werner-net.work>
2019-07-26 16:23:20 +07:00
Arthur Schiwon
8c956693a5
treat sensitive config keys by pattern
...
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2019-07-26 14:07:17 +07:00
Roeland Jago Douma
7e1369f5d3
Merge pull request #16549 from nextcloud/dependabot/npm_and_yarn/settings/stable15/fstream-1.0.12
...
[Security] Bump fstream from 1.0.11 to 1.0.12 in /settings
2019-07-26 12:16:57 +07:00
dependabot-preview[bot]
d7967a8649
[Security] Bump fstream from 1.0.11 to 1.0.12 in /settings
...
Bumps [fstream](https://github.com/npm/fstream ) from 1.0.11 to 1.0.12. **This update includes a security fix.**
- [Release notes](https://github.com/npm/fstream/releases )
- [Commits](https://github.com/npm/fstream/compare/v1.0.11...v1.0.12 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-07-26 06:10:32 +07:00
Roeland Jago Douma
7298fb935f
Merge pull request #16548 from nextcloud/dependabot/npm_and_yarn/build/stable15/fstream-1.0.12
...
[Security] Bump fstream from 1.0.11 to 1.0.12 in /build
2019-07-26 08:09:12 +07:00
Nextcloud bot
6332721ffa
[tx-robot] updated from transifex
2019-07-26 02:14:56 +07:00
dependabot-preview[bot]
9368bc842c
[Security] Bump fstream from 1.0.11 to 1.0.12 in /build
...
Bumps [fstream](https://github.com/npm/fstream ) from 1.0.11 to 1.0.12. **This update includes a security fix.**
- [Release notes](https://github.com/npm/fstream/releases )
- [Commits](https://github.com/npm/fstream/compare/v1.0.11...v1.0.12 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-07-26 01:56:50 +07:00
Roeland Jago Douma
092a233f91
Merge pull request #16537 from nextcloud/backport/16503/stable15
...
[stable15] allow to provide supported calendar component set internally as a string
2019-07-25 15:44:13 +07:00
Georg Ehrke
07cbabb5db
allow to provide supported calendar component set internally as a string
...
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2019-07-25 11:37:54 +07:00
Nextcloud bot
469da4ff0a
[tx-robot] updated from transifex
2019-07-25 02:14:55 +07:00
Nextcloud bot
ce37c6586b
[tx-robot] updated from transifex
2019-07-24 02:15:50 +07:00
Nextcloud bot
cbd7ac6ac0
[tx-robot] updated from transifex
2019-07-23 02:15:57 +07:00
Nextcloud bot
6a878f0fce
[tx-robot] updated from transifex
2019-07-22 02:16:15 +07:00
Nextcloud bot
ba8804dba9
[tx-robot] updated from transifex
2019-07-21 02:15:24 +07:00
Nextcloud bot
12670fbf38
[tx-robot] updated from transifex
2019-07-20 02:14:46 +07:00
Nextcloud bot
5c3e599a15
[tx-robot] updated from transifex
2019-07-19 02:15:14 +07:00
Roeland Jago Douma
fb60ef6d1a
Merge pull request #16445 from nextcloud/backport/16440/stable15
...
[stable15] Fix File#putContents(string) on ObjectStorage
2019-07-18 08:09:03 +07:00
Nextcloud bot
788d727ccc
[tx-robot] updated from transifex
2019-07-18 02:15:11 +07:00
Marcel Klehr
eb14a8fcba
Fix File#putContents(string) on ObjectStorage
...
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
2019-07-17 20:40:05 +07:00
Roeland Jago Douma
cb99a62c07
Merge pull request #16433 from nextcloud/backport/16424/stable15
...
[stable15] Do not keep searching for recent
2019-07-17 09:20:53 +07:00
Roeland Jago Douma
7bd081ff84
Do not keep searching for recent
...
If userA has a lot of recent files. But only shares 1 file with userB
(that has no files at all). We could keep searching until we run out of
recent files for userA.
Now assume the inactive userB has 20 incomming shares like that from
different users. getRecent then basically keeps consuming huge amounts
of resources and with each iteration the load on the DB increases
(because of the offset).
This makes sure we do not get more than 3 times the limit we search for
or more than 5 queries.
This means we might miss some recent entries but we should fix that
separatly. This is just to make sure the load on the DB stays sane.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-07-17 05:48:53 +07:00
Nextcloud bot
f42afb059e
[tx-robot] updated from transifex
2019-07-17 02:15:46 +07:00
Roeland Jago Douma
279b73414c
Merge pull request #16426 from nextcloud/backport/16423/stable15
...
[stable15] Only prevent disabling encrytion via the API
2019-07-16 22:18:46 +07:00
Joas Schilling
d5cd482708
Only prevent disabling encrytion via the API
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2019-07-16 17:46:59 +07:00
Nextcloud bot
938b8664e9
[tx-robot] updated from transifex
2019-07-16 02:15:01 +07:00
Nextcloud bot
654feeee6c
[tx-robot] updated from transifex
2019-07-15 02:14:44 +07:00