2916e5df7e
feat: Provide CSP nonce as `<meta>` element
...
This way we use the CSP nonce for dynamically loaded scripts.
Important to notice: The CSP nonce must NOT be injected in `content` as
this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors).
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-13 10:32:44 +07:00
009761be58
test: Adjust tests for CSP nonce
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-13 10:06:32 +07:00
86f01a3358
fix: Make sure CSP nonce is not double base64 encoded
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-13 09:52:33 +07:00
73397cd759
fix: Use `CSP_NONCE` env variable in ContentSecurity Header
...
We should use 'cspNonceManager' for requesting the NONCE value, because it is doing the same as before, except that it honors a CPS_NONCE environment variable if available.
Signed-off-by: Holger Hees <holger.hees@gmail.com>
2024-08-13 09:52:08 +07:00
21db618174
Fix(l10n): Update translations from Transifex
...
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2024-08-13 00:20:11 +07:00
735e04e100
Merge pull request #47177 from nextcloud/fix/noid/preferred-taskprocessing-providers
...
[Task processing] Fix preferred providers
2024-08-13 01:31:52 +07:00
475d0089c2
feat(taskprocessing): add text2text, text2image, contextWrite, transcribe and translate providers in the testing app
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2024-08-13 00:05:26 +07:00
dbab2a825d
fix(taskprocessing): select preferred provider when running sync task, fix task type values according to preferred provider
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2024-08-12 13:11:41 +07:00
b34edf2224
Merge pull request #46987 from nextcloud/fix/dav-public
...
fix(dav): Ensure share properties are also set on public remote endpoint
2024-08-12 12:06:15 +07:00
4bbcbc5206
feat: Make `ISharedStorage` public API and reuse where possible
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-12 11:42:10 +07:00
cb1b366baf
fix(dav): Ensure share properties are also set on public remote endpoint
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-12 11:28:03 +07:00
1a7acf061e
Fix(l10n): Update translations from Transifex
...
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2024-08-12 00:19:52 +07:00
722a74e0e8
Fix(l10n): Update translations from Transifex
...
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2024-08-11 00:19:57 +07:00
4a512d408d
Merge pull request #47157 from nextcloud/perf/prevent-extra-requests
...
perf(files): Prevent extraneous requests when tree children are loading
2024-08-10 05:59:44 +07:00
d50b6da868
Merge pull request #47153 from nextcloud/trashbin-fix-folder-extract
...
fix: fix getting the folder node from the dav response
2024-08-10 14:48:14 +07:00
34e24b24c3
chore(assets): Recompile assets
...
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2024-08-10 14:34:05 +07:00
69ea15cc98
fix: fix getting the folder node from the dav response
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-08-10 14:29:52 +07:00
dbd197cedc
Fix(l10n): Update translations from Transifex
...
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2024-08-10 00:20:14 +07:00
d0186fe5ca
chore: compile assets
...
Signed-off-by: Christopher Ng <chrng8@gmail.com>
2024-08-09 15:32:17 +07:00
a3ad8daed6
perf(files): Prevent extraneous requests when tree children are loading
...
Signed-off-by: Christopher Ng <chrng8@gmail.com>
2024-08-09 15:32:17 +07:00
90742357ca
Merge pull request #47152 from nextcloud/fix/guest-layout
...
fix(styles): Guest layout should follow the new design
2024-08-09 20:15:57 +07:00
4591c188e6
Merge pull request #47135 from nextcloud/fix/open-tags-in-folder
...
fix(systemtags): Sub folders should be opened in files
2024-08-09 15:50:39 +07:00
124288f534
fix(systemtags): Sub folders should be opened in files
...
Currently this is simply broken and here are two ways:
1. Open subfolders in files view
2. Implement logic to save last request
1 is the way this is now implemented, basically copy-paste from the recent view.
2 is much more complicated because if we get `/2/foo/bar` as the path we need to know the source of `foo`, so we would need at least 2 requests or cache the previous directory. We do not do it like this for any view so lets just stick with 1 for now.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-09 15:33:54 +07:00
2d99539193
chore: Compile assets
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-09 14:45:19 +07:00
874de85d14
fix(styles): Guest layout should follow the new design
...
1. Adjust some places that used the old pill-style design
2. Make indention consistent using tabs
3. Remove duplicates styles for inputs (also included in server.css) that conflic with nextcloud-vue styles
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-09 14:42:50 +07:00
a041833a95
Merge pull request #47147 from nextcloud/fix/trim-new-folder
...
fix(files): trim names on new node creation
2024-08-09 14:39:30 +07:00
e4e12a35f5
fix(files): trim names on new node creation
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2024-08-09 11:58:37 +07:00
81b01c26c5
Merge pull request #47149 from nextcloud/fix/disable-tags-editing
...
fix(files): Disable tags editing for shared files/folders with view only permission
2024-08-09 13:52:30 +07:00
de769f086a
chore(assets): Recompile assets
...
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2024-08-09 11:35:09 +07:00
81ee1ce8fc
fix(files): Disable tags editing for shared files/folders with view only permission
...
Signed-off-by: Konstantin Myakshin <molodchick@gmail.com>
2024-08-09 11:42:28 +07:00
dda6dd0bf4
Fix(l10n): Update translations from Transifex
...
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2024-08-09 00:25:27 +07:00
82d2ec0931
Merge pull request #47100 from nextcloud/release/30.0.0_beta_5
2024-08-08 22:59:05 +07:00
1b8dbcbf2f
Merge pull request #46456 from nextcloud/fix/check-datadir
2024-08-08 22:58:03 +07:00
0563757ea4
fix(SetupCheck): Properly check public access to data directory
...
When checking for public (web) access to the data directory the status is not enough
as you might have a webserver that forwards to e.g. a login page.
So instead check that the content of the file matches.
For this the `.ncdata` file (renamed from `.ocdata`¹) has minimal text content
to allow checking.
¹The file was renamed from the legacy `.ocdata`, there is a repair step to remove the old one.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-08 22:08:42 +07:00
8c0bece57a
Merge pull request #47122 from nextcloud/feat/limited-depth-tree
...
feat(files): Load limited depth tree
2024-08-08 11:55:15 +07:00
36c23b2ee0
chore: compile assets
...
Signed-off-by: Christopher Ng <chrng8@gmail.com>
2024-08-08 11:26:51 +07:00
44bc57bc57
feat: Load limited depth tree
...
Signed-off-by: Christopher Ng <chrng8@gmail.com>
2024-08-08 11:15:52 +07:00
cfec6fcb1a
feat(files): Add getter for all view configs
...
Signed-off-by: Christopher Ng <chrng8@gmail.com>
2024-08-08 10:52:20 +07:00
86459aa5da
perf(files): Remove redundant call to get navigation
...
Signed-off-by: Christopher Ng <chrng8@gmail.com>
2024-08-08 10:52:20 +07:00
36cf891b7f
feat(files): Update openapi
...
Signed-off-by: Christopher Ng <chrng8@gmail.com>
2024-08-08 10:52:20 +07:00
e9083db768
feat(files): Allow specifying path and depth for returned folder tree
...
Signed-off-by: Christopher Ng <chrng8@gmail.com>
2024-08-08 10:52:20 +07:00
b30054abb7
Merge pull request #47140 from nextcloud/fix/app-menu-focus
...
fix: Make focused app menu entry wider to see full name
2024-08-08 18:53:40 +07:00
e5bb27c2d8
chore: Compile assets
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-08 18:24:39 +07:00
ed16793089
fix: Make focussed app menu entry wider to see full name
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-08 18:24:35 +07:00
e49c55df12
Merge pull request #47121 from nextcloud/fix/a11y-inline-action
...
fix(systemtags): Make inline tags list fully accessible
2024-08-08 14:05:41 +07:00
e21fc6c762
Merge pull request #46624 from nextcloud/fix/issue-43923
...
fix(caldav): test for null and blank value
2024-08-08 07:55:10 +07:00
d21c2933e5
chore: Compile assets
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-08 13:23:01 +07:00
a8d3046886
test: Added e2e tests for inline system tags file action
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-08 13:21:25 +07:00
c96274c52a
fix(systemtags): Make inline tags list fully accessible
...
1. The label was wrong it mentioned the first and last tag, so the information was duplicated
2. It only mentioned the first and last but not all other
3. All other tags were only added as `title` which is not accessible
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-08 13:21:21 +07:00
2777cf90e3
Merge pull request #47120 from nextcloud/fix/systemtags
...
fix(systemtags): Correctly load tagged files in "tags"-files-view
2024-08-08 10:00:20 +07:00
Ferdinand Thiessen
Holger Hees
Nextcloud bot
Julien Veyssier
Pytal
nextcloud-command
Robin Appelman
Christopher Ng
skjnldsv
John Molakvoæ
Konstantin Myakshin
Benjamin Gaussorgues
Andy Scherzinger
Sebastian Krupinski