Arthur Schiwon
|
0f489e80ad
|
LDAP: transliterate other latin characters to ASCII when creating owncloud names. Already created usernames are not being affected. Fixes ugly names with removed Umlauts, chars with accents and likes.
|
2012-09-18 17:10:21 +07:00 |
Victor Dubiniuk
|
95a748152e
|
Fix for cyrillic folder names. ref#oc-1683
|
2012-09-11 23:57:13 +07:00 |
Georg Ehrke
|
b37d318159
|
back port better input validation in calendar from apps repo
|
2012-08-31 14:27:03 +07:00 |
Arthur Schiwon
|
b11203537e
|
LDAP: check for existing username from other backends when creating one for an LDAP user or group. Fixes oc-1551 in stable4. Also optimizes groupExists() function as side effect.
|
2012-08-29 18:07:32 +07:00 |
Lukas Reschke
|
5afdfec91d
|
Sanitizing the user input to prevent a reflected XSS. Thanks to Nico Golde (ngolde.de)
|
2012-08-21 17:56:20 +07:00 |
Arthur Schiwon
|
2051a5db5d
|
Fix deletion for browser that do not support onBeforeUnload, fixes oc-1534
|
2012-08-20 17:04:57 +07:00 |
Lukas Reschke
|
4984a72d0d
|
Add a missing exit();
|
2012-08-18 14:57:19 +07:00 |
Lukas Reschke
|
45003593e1
|
Use SCRIPT_NAME instead of PHP_SELF which won't send the PATH_INFO, this prevents XSS in old browsers. Thanks to Nico Golde.
|
2012-08-18 09:26:58 +07:00 |
Lukas Reschke
|
4682846d3e
|
Disable user enumeration
|
2012-08-14 17:19:20 +07:00 |
Lukas Reschke
|
2024d424cd
|
Disable listing of all users
|
2012-08-13 01:22:53 +07:00 |
Lukas Reschke
|
2871896d54
|
Check if webfinger is enabled
|
2012-08-10 16:38:32 +07:00 |
Michael Gapczynski
|
e9a63900de
|
Don't return file handle if the mode supports writing and the file is not writable
Conflicts:
apps/files_sharing/sharedstorage.php
|
2012-08-10 09:46:44 +07:00 |
Lukas Reschke
|
7581d55428
|
Missed an "echo"
|
2012-08-09 22:17:52 +07:00 |
Lukas Reschke
|
aae17d4ae8
|
Sanitize user input
|
2012-08-09 22:14:48 +07:00 |
Arthur Schiwon
|
e9e84b5c3b
|
Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4
|
2012-08-05 21:17:39 +07:00 |
Georg Ehrke
|
c32a99b14c
|
fix label for versioning in admin settings
|
2012-08-04 18:50:05 +07:00 |
Bart Visscher
|
758ae42df0
|
Calendar: remove double html encoding
|
2012-08-03 16:26:05 +07:00 |
Bart Visscher
|
0970a3c60e
|
Contacts: Fix no active Addressbooks
|
2012-08-03 16:11:10 +07:00 |
Arthur Schiwon
|
6b78ca1a5a
|
LDAP: sanitize base, user and group trees. fixes oc-1302
|
2012-08-03 15:51:25 +07:00 |
Arthur Schiwon
|
b523366acd
|
LDAP: don't die on unexpected collisions, handle empty display-name attributes properly
|
2012-07-30 17:30:11 +07:00 |
Michael Gapczynski
|
b9bd54bd98
|
Add additional error handling for emailing private links
|
2012-07-30 10:07:20 +07:00 |
Michael Gapczynski
|
dab708b625
|
Correction for 'Fix group detection for sharing in case username contains '@', fix for oc-1270'
|
2012-07-30 10:07:20 +07:00 |
Michael Gapczynski
|
519eb39422
|
Remove delete tipsy if file is deleted, fixes bug oc-958
|
2012-07-30 10:07:19 +07:00 |
Michael Gapczynski
|
3e183b2eea
|
Set filter to empty if not set by Ampache client
Conflicts:
apps/media/lib_ampache.php
|
2012-07-30 10:07:19 +07:00 |
Michael Gapczynski
|
d07b8448d1
|
Set the user id when authenticating user for Ampache, fixes bug oc-219
|
2012-07-30 10:07:19 +07:00 |
Michael Gapczynski
|
7d17c59a51
|
Fix group detection for sharing in case username contains '@', fix for oc-1270
|
2012-07-30 10:07:19 +07:00 |
Michael Gapczynski
|
f378415377
|
Only call mkdir() if the root folder does not exist for FTP external storage
|
2012-07-30 10:07:19 +07:00 |
Michael Gapczynski
|
f328f53ec1
|
Fix filesystem hash, no longer using basicOperation()
Conflicts:
lib/filesystemview.php
|
2012-07-30 10:07:19 +07:00 |
Thomas Tanghus
|
01f25119d5
|
Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4
|
2012-07-30 12:28:40 +07:00 |
Thomas Tanghus
|
f91783e9ab
|
Fix errors when no addressbook.
|
2012-07-30 12:28:10 +07:00 |
Georg Ehrke
|
d8aca0c78e
|
apply fix suggested in oc-1132 - bugfix for oc-1132
|
2012-07-26 18:40:12 +07:00 |
Georg Ehrke
|
8cff0d997f
|
convert through caldav transmitted rgba calendarcolor to rgb
|
2012-07-26 14:48:00 +07:00 |
Lukas Reschke
|
95936024bc
|
Updated packages
|
2012-07-26 01:12:58 +07:00 |
Arthur Schiwon
|
3c9919e475
|
LDAP: check if php-ldap is installed. If not, give an error output. FIX: blank Users page when the module is not installed.
|
2012-07-25 18:21:16 +07:00 |
Georg Ehrke
|
9b0870bb91
|
add some calendar sharing hooks in stable4 - bugfix for oc-1325
|
2012-07-25 17:02:24 +07:00 |
Bjoern Schiessle
|
73734c98e0
|
- remove namespace from file property name (webdav)
- update script to fix broken properties in the database
|
2012-07-23 11:00:37 +07:00 |
Lukas Reschke
|
38271ded75
|
Added CSRF checks
|
2012-07-20 20:12:36 +07:00 |
Arthur Schiwon
|
0bd7d14b7a
|
Sharing: offer an option to allow sharing with everyone, i.e. do not check group memberships
|
2012-07-17 14:09:01 +07:00 |
Thomas Tanghus
|
9326f4f535
|
Added hooks for postCreateUser to add default address book and calendar. Fixes oc-1265.
|
2012-07-17 10:45:15 +07:00 |
Thomas Tanghus
|
f4a8c233cf
|
Added hook for postCreateUser. Probably fix for oc-1265.
Conflicts:
apps/calendar/appinfo/app.php
|
2012-07-17 10:35:46 +07:00 |
Thomas Tanghus
|
eb2a15d58f
|
Format birthday as BDAY;VALUE=DATE:YYYY-MM-DD. Fixes oc-1276.
|
2012-07-16 23:36:11 +07:00 |
Thomas Tanghus
|
47d50fc424
|
Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4
|
2012-07-16 21:22:07 +07:00 |
Thomas Tanghus
|
d64300251b
|
Corrected javascript definition.
|
2012-07-16 21:21:37 +07:00 |
Georg Ehrke
|
d4e2cb6e62
|
fix encoding fail in calendar app - bugfix for oc-1194
|
2012-07-16 19:53:19 +07:00 |
Thomas Tanghus
|
225726c8d9
|
latin1 => utf8. I thought I did this a month ago?
|
2012-07-16 01:41:45 +07:00 |
Bjoern Schiessle
|
50eef9a71c
|
update script to fix fscache
|
2012-07-13 15:17:36 +07:00 |
Michael Gapczynski
|
7b2ec41477
|
Revert santizing toaddress, because PHPMailer now throws exceptions
Conflicts:
apps/files_sharing/ajax/email.php
|
2012-07-11 19:38:57 +07:00 |
Michael Gapczynski
|
ebcf5bce3c
|
Sanitize toaddress for emailing private links
Conflicts:
apps/files_sharing/ajax/email.php
|
2012-07-11 19:38:56 +07:00 |
Lukas Reschke
|
d203fa2c50
|
Sanitizing file names
|
2012-07-11 19:15:11 +07:00 |
Robin Appelman
|
7f57591ef1
|
suppress error when using is_dir on non directory in smb backend
|
2012-07-10 14:20:30 +07:00 |