60b8384e48
Merge branch 'master' into remove-x-xss-protection
2025-06-30 21:32:22 +07:00
6254354f27
test(dav): add integration test for principal property search
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2025-06-17 11:19:24 +07:00
2b58f74cc8
Fix: Remove X-XSS-Protection use, check and recommendation
...
Co-authored-by: John Molakvoæ <skjnldsv@users.noreply.github.com>
Signed-off-by: invario <67800603+invario@users.noreply.github.com>
2025-06-13 16:12:27 +07:00
b4255a9652
fix(dav): allow uploading of files with long filenames
...
A filename must be less or equal 255 characters, but when adding the
`.part` and `.ocfiletransfer` extensions we might overflow this limit.
So we should also use filename hashes for uploading when the file has a
long filename, similar like when we are uploading to the user storage
directly.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-04-22 11:09:25 +07:00
92795b2091
chore(test): use consistent tabs for indention in behat tests
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-03-19 20:59:08 +07:00
b59c71ccf8
test: Add integration tests for moving a file from and to a shared folder
...
Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
2025-01-27 14:13:07 +07:00
d3126cd1bb
fix(dav): default calendar and address book not created on first login
...
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
2025-01-23 22:02:52 +07:00
9193cd664e
fix: block moving files to it's own parent with dav
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-01-03 15:30:20 +07:00
6b383faf41
Revert "fix(dav): Always respond custom error page on exceptions"
...
This reverts commit 9992e7d439
2024-11-22 11:55:25 +07:00
bbc5d32c8e
fix(dav): Public WebDAV endpoint should allow `GET` requests
...
`GET` should be allowed even without Ajax header to allow downloading files,
or show files in the viewer. All other requests could be guarded, but this should not.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-10-09 17:10:52 +07:00
d66e16b07e
feat(dav): New `ZipFolderPlugin` which allows to download folders using GET requests
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-09-28 13:18:23 +07:00
1d16bc47ff
fix(files_sharing): Handle download permission the same way for public and internal shares
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-09-06 03:38:47 +07:00
9992e7d439
fix(dav): Always respond custom error page on exceptions
...
Signed-off-by: Louis Chemineau <louis@chmn.me>
2024-09-05 16:17:32 +07:00
cb1b366baf
fix(dav): Ensure share properties are also set on public remote endpoint
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-12 11:28:03 +07:00
957a00b9de
chore: remove chunking-v1
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-06-19 16:57:42 +07:00
1e04619675
chore: Add SPDX header
...
Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
2024-06-06 22:53:41 +07:00
53ef6c5f71
feat(dav): update a principal's schedule-default-calendar-URL
...
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
2024-02-28 14:51:10 +07:00
dce69154ba
enh(sharing): enable unsharing for sharees for DAV shares (addressbooks and calendars)
...
Signed-off-by: Anna Larch <anna@nextcloud.com>
2024-02-15 18:01:12 +07:00
058b69eef0
chore: Move integration tests from drone to github
...
* Improve grouping as setting up CI took 3* the time of the test in average
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-01-26 13:53:29 +07:00
Joas Schilling
Daniel Kesselberg
invario
Ferdinand Thiessen
Daniel Calviño Sánchez
Richard Steinmetz
Robin Appelman
Louis Chemineau
Andy Scherzinger
Anna Larch
Joas Schilling