Commit Graph

409 Commits (99eb6e10f8fdc0e995e62fc00a65a06cf30555bd)

Author SHA1 Message Date
Lukas Reschke a4cfb3ddc1
Don't print exception message in HTML
The exception message is potentially influenced by user input and could thus be confusing (e.g. somebody could try to open a file like "Please send a mail to support@foo.com", and then the message would include that string.

It is thus reasonable to not show the exception message by default. Also for the browser view I added an `exit()` at the end, as otherwise the XML exception would be attached.
2016-09-09 14:17:14 +07:00
Joas Schilling 86a673a05a
Fix tests 2016-09-08 09:47:49 +07:00
Joas Schilling a69fe583f8
UPDATE permissions qualify for renaming a node 2016-09-08 09:43:12 +07:00
Joas Schilling 338ce725c7
Only require CREATE permissions when the file does not exist yet 2016-09-08 09:41:58 +07:00
Joas Schilling 4bb1e42687
Add a unit test for all the magic 2016-08-31 12:19:34 +07:00
Joas Schilling d8adb48147
Correctly handle multi-values when converting VCards to array 2016-08-31 12:19:16 +07:00
Thomas Müller 8d290916b9
Move over to new CalDAVTester repo (#25859)
* Move over to new caldac tester repo

* no run.py anymore
2016-08-19 10:21:10 +07:00
Lukas Reschke 971f22edc5
[stable9] Adding quota plugin to new dav endpoint
Backport of https://github.com/nextcloud/server/pull/648
2016-07-29 12:41:53 +07:00
Joas Schilling ca6a7d9e6a
Run the license script 2016-07-22 09:48:05 +07:00
Thomas Müller 96e2a3a4b2
Cast share id to string (#25402) (#25431) 2016-07-20 15:11:04 +07:00
Joas Schilling 06ac822b71
Use the themed Defaults everywhere 2016-07-15 09:22:44 +07:00
Morris Jobke 11e834ea74
Merge branch 'stable9' into sync-stable9 2016-07-07 12:03:34 +07:00
Vincent Petry a2e0573987 Merge pull request #25298 from owncloud/schiessle-fix-get-contact-stable9
[stable9] get only vcards which match both the address book id and the vcard uri
2016-07-06 11:52:27 +07:00
Björn Schießle 756b0c05b6 Merge pull request #282 from nextcloud/fix-tests
Fix unit test compatibility issues with phpunit 5.2+
2016-07-01 17:11:19 +07:00
Joas Schilling 3399d66c8e
Fix Comments tests with phpunit 5.2+ 2016-07-01 16:41:29 +07:00
Björn Schießle 7e4366ec86 Merge pull request #244 from nextcloud/theming-app-stable9
[stable9] theming app
2016-07-01 16:22:01 +07:00
Joas Schilling 28b3a0a37e
Fix DAV tests with phpunit 5.2+ 2016-07-01 16:16:40 +07:00
Joas Schilling 497c3fbfd7
Also fix the dav test 2016-07-01 15:45:58 +07:00
Thomas Müller 4a4103b923 Suppress warnings from DAV migration if there's nothing to do (#25279) 2016-07-01 11:30:14 +07:00
Morris Jobke 23cc465b0d Merge pull request #254 from nextcloud/fix-229-stable9
[stable9] get only vcard which match both the address book id and the vcard uri
2016-06-30 17:43:46 +07:00
Lukas Reschke da0666e4f0
Name method properly 2016-06-30 15:37:33 +07:00
Bjoern Schiessle 3491400261
add some additonal permission checks to the webdav backend 2016-06-30 15:05:13 +07:00
Bjoern Schiessle 6a61cc0e35
get only vcard which match both the address book id and the vcard uri 2016-06-30 10:46:21 +07:00
Björn Schießle 1f71285137
get only vcards which match both the address book id and the vcard uri (#25294) 2016-06-29 12:18:28 +07:00
Lukas Reschke dcb5f00461
Merge remote-tracking branch 'upstream/stable9' into stable9-upstream-sync 2016-06-26 12:48:19 +07:00
Morris Jobke 8abf6e0ed1
fixed code 2016-06-20 18:50:56 +07:00
Vincent Petry 81761b87e4
DAV now returns file name with Content-Disposition header 2016-06-13 10:50:10 +07:00
Lukas Reschke 68c38ae8c2
[stable9] Backport files drop feature 2016-06-11 11:38:16 +07:00
Lukas Reschke 218e4b48ad
Adjust some more branding texts
Replaces ownCloud with Nextcloud in the user-facing messages
2016-06-11 10:46:02 +07:00
Joas Schilling c433218aa1
Catch the ForbiddenException to make sure it gets handled 2016-06-03 15:16:11 +07:00
Thomas Müller 711641e4a9
Personal calendar should be generated even if the birthday calendar already exists - fixes #24082 2016-04-22 13:03:31 +07:00
Thomas Müller 4e50dd87d5
Birthday calendar should never have write acl - fixes #24154 2016-04-21 16:44:06 +07:00
Thomas Müller 1d4d45e91f Adding VCFExportPlugin 2016-04-10 20:41:44 +07:00
Thomas Müller c929c4db84 Merge pull request #23801 from owncloud/fix-23496-master-stable9
[stable9] Avoid fatal php error dring cron execution
2016-04-08 14:50:32 +07:00
Thomas Müller dca6869a89 Merge pull request #23574 from owncloud/sabre-plugin-browser-error-page-stable9
[stable9] Sabre plugin browser error page
2016-04-06 15:32:12 +07:00
Thomas Müller 19541dd1ce fixes #23496 2016-04-05 14:01:23 +07:00
Thomas Müller b6fb3148c2 Revert "Explicitly add the current principal to the acl in case of group sharing"
This reverts commit 52f4acf23d.
2016-03-31 11:22:47 +07:00
Thomas Müller ef8b75960c Handle group shares of addressbooks on v1 as well ... now FINALLY .... 2016-03-31 09:07:36 +07:00
Thomas Müller f28817aed5 Fix acls for calendar objects and cards - fixes #23273 2016-03-31 09:07:36 +07:00
Thomas Müller cb300d164e Return proper current-user-principal on v1 endpoints - fixes #23306 2016-03-31 09:05:39 +07:00
Thomas Müller e664e582fb Fix group shares on v1 caldav and carddav - fixes #23328 2016-03-31 09:05:39 +07:00
Thomas Müller 8c9842fbd9 Fix unit test 2016-03-30 10:01:17 +07:00
Thomas Müller 52f4acf23d Explicitly add the current principal to the acl in case of group sharing 2016-03-29 19:09:31 +07:00
Lukas Reschke 1f4e824d0b Add magical regex to catch browsers 2016-03-24 19:03:21 +07:00
Thomas Müller 7a6d4a3287 In case of exception we return an html page in case the client is a browser 2016-03-24 19:03:21 +07:00
Vincent Petry 1f4738c372 Return remote shares in oc:share-types Webdav property
Fixes web UI to properly display the share status icon when an outgoing
remote share exists
2016-03-24 17:22:09 +07:00
Lukas Reschke 2139130ec8 Check if request is sent from official ownCloud client
There are authentication backends such as Shibboleth that do send no Basic Auth credentials for DAV requests. This means that the ownCloud DAV backend would consider these requests coming from an untrusted source and require higher levels of security checks. (e.g. a CSRF check)

While an elegant solution would rely on authenticating via token (so that one can properly ensure that the request came indeed from a trusted client) this is a okay'ish workaround for this problem until we have something more reliable in the authentication code.
2016-03-24 09:00:35 +07:00
Thomas Müller 3b98e8c56d Merge pull request #23467 from owncloud/early-creation-of-birthday-calendar-stable9
Create the contact birthday calendar right away as soon as the comman…
2016-03-22 17:28:11 +07:00
Arthur Schiwon 90a2be58f8 adjust PrincipalUri as returned from Sabre to effective username
backport of #23404
2016-03-22 15:24:01 +07:00
Thomas Müller ad852ca24a Create the contact birthday calendar right away as soon as the command is executed once - fixes #23203 2016-03-22 10:31:53 +07:00