6d2253e692
Merge pull request #46013 from nextcloud/obj-store-move-from-storage-preserve-fileid
...
fix: write object to the correct urn when moving from another storage to object store
2024-08-26 13:47:27 +07:00
36f272d03b
Merge pull request #47435 from phreaker0/fix-mail-template-class-call
...
fix(mailer): Call to custom mail_template_class
2024-08-26 08:58:00 +07:00
af6de04e9e
style: update codestyle for coding-standard 1.2.3
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2024-08-25 19:34:58 +07:00
4a3ade5d43
Merge pull request #46021 from nextcloud/middleware-delay-admin
...
perf: delay getting (sub)admin status for user in the security middleware untill we need it
2024-08-23 17:38:01 +07:00
8b60df1600
perf: delay getting (sub)admin status for user in the security middleware untill we need it
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-08-23 15:26:40 +07:00
bd740ac0b0
fix: write object to the correct urn when moving from another storage to object store
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-08-23 15:22:16 +07:00
658d2f7ea1
feat: expose escapeLikeParameter trough query builder
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-08-23 15:12:10 +07:00
ae787c5ef2
fix call to custom mail_template_class
...
Signed-off-by: Christoph Klaffl <christoph@phreaker.eu>
2024-08-22 19:39:23 +07:00
c3ad469750
Merge pull request #47259 from nextcloud/memcache-ncad
...
feat: add negative compare-and-delete to imemcache
2024-08-21 17:19:04 +07:00
1992a6d72b
Merge pull request #47371 from nextcloud/fix/disable-auto-zoom-ios
...
fix: Disable auto-zoom on iOS
2024-08-21 14:32:16 +07:00
d5140fe034
Merge pull request #47372 from nextcloud/fix/filename-validator
...
fix: `FilenameValidator::isForbidden` should only check forbidden files
2024-08-21 13:07:33 +07:00
c82b17d0a3
fix: Support Safari mobile
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-21 13:01:23 +07:00
ec00367f30
fix: Disable auto-zoom on iOS
...
When using iOS and focussing an input element the view should not be zoomed.
So if we set a maximum scale iOS will not auto-zoom but still allow users to zoom.
But we can not do this by default as this will disable user zoom on Chrome.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-21 13:01:18 +07:00
dbbe2bbcb7
fix(theming): Make getImage() call save against missing non-SVG version
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-08-21 10:30:25 +07:00
b9cc7bcec7
fix: `FilenameValidator::isForbidden` should only check forbidden files
...
And not forbidden basenames as this is used for different purposes.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-21 04:16:14 +07:00
20dbb6c7e8
feat: add negative compare-and-delete to imemcache
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-08-20 19:34:28 +07:00
3756152cb1
fix: use mountpoint from storage to find the encryption keys
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-08-20 13:32:03 +07:00
1071201052
feat: store the mountpoint of storages in the mount options
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-08-20 13:31:35 +07:00
2ec68b1eb9
refactor(Log): Use new in initializer instead of constructor body
...
PHP 8.1 allows us to now move the `new` into the initializer,
this makes the code a bit nicer (and 3 lines shorter).
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-17 18:38:28 +07:00
a92171260f
fix: check for correct storage class when checking for link parent
...
fixes #39123
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-08-16 13:13:31 +07:00
13a72d0f0e
Merge pull request #38750 from whlsxl/postgres-install-error
2024-08-16 12:58:58 +07:00
67c52d202c
fix: use `$this->tryCreateDbUser` condition
2024-08-16 10:59:15 +07:00
f490a4e8c0
fix: postgresql GRANT user's permission after createDatabase, ensure database exist when GRANT
2024-08-16 10:57:11 +07:00
d35c4eb911
Merge branch 'master' into jr-readdir-false-false
...
Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>
2024-08-16 10:53:50 +07:00
9189bc290b
feat(webauthn): Add user verification to webauthn challenges
...
Require user verification if all tokens are registered
with UV flag, else discourage it
Signed-off-by: S1m <git@sgougeon.fr>
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
2024-08-15 11:03:10 +07:00
7641e768b3
Merge pull request #45435 from nextcloud/feat/dav/upcoming-events-api
...
feat(dav): Add an API for upcoming events
2024-08-14 06:54:43 +07:00
370a9d77ea
feat(dav): Add an API for upcoming events
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2024-08-13 20:03:31 +07:00
3e409fd342
Merge pull request #43573 from nextcloud/HolgerHees-fix-csp-nonce-handling
...
Fix for ignored `CSP_NONCE` in ContentSecurity Header
2024-08-13 17:53:30 +07:00
5100e3152d
feat(auth): Clean-up unused auth tokens and wipe tokens
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2024-08-13 12:39:11 +07:00
142b6e313f
Merge pull request #47180 from nextcloud/fix/apply-group-limit-on-remove-from-group
...
Apply group limit on remove from group
2024-08-13 12:20:48 +07:00
2916e5df7e
feat: Provide CSP nonce as `<meta>` element
...
This way we use the CSP nonce for dynamically loaded scripts.
Important to notice: The CSP nonce must NOT be injected in `content` as
this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors).
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-13 10:32:44 +07:00
86f01a3358
fix: Make sure CSP nonce is not double base64 encoded
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-13 09:52:33 +07:00
73397cd759
fix: Use `CSP_NONCE` env variable in ContentSecurity Header
...
We should use 'cspNonceManager' for requesting the NONCE value, because it is doing the same as before, except that it honors a CPS_NONCE environment variable if available.
Signed-off-by: Holger Hees <holger.hees@gmail.com>
2024-08-13 09:52:08 +07:00
e23325f047
fix: Remove shares only if there are no more common groups between users
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2024-08-12 15:20:21 +07:00
5559beb28c
fix(files_sharing): Delete user shares if needed when user is removed from a group
...
Signed-off-by: Louis Chemineau <louis@chmn.me>
2024-08-12 14:41:19 +07:00
dbab2a825d
fix(taskprocessing): select preferred provider when running sync task, fix task type values according to preferred provider
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2024-08-12 13:11:41 +07:00
0563757ea4
fix(SetupCheck): Properly check public access to data directory
...
When checking for public (web) access to the data directory the status is not enough
as you might have a webserver that forwards to e.g. a login page.
So instead check that the content of the file matches.
For this the `.ncdata` file (renamed from `.ocdata`¹) has minimal text content
to allow checking.
¹The file was renamed from the legacy `.ocdata`, there is a repair step to remove the old one.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-08-08 22:08:42 +07:00
609fa7d5db
Merge pull request #47044 from nextcloud/fix/accept-several-mounts-in-encryption
...
fix(encryption): Fix mountpoint check to accept if several are found
2024-08-07 20:58:19 +07:00
495f454b6f
Merge pull request #46395 from nextcloud/apcu-default-ttl
...
fix: set default TTL for APCu cache as per docs
2024-08-07 20:16:02 +07:00
cae0a8218d
chore: remove Redis::DEFAULT_TTL constant now that it's defined in the interface
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-08-07 19:41:44 +07:00
b19652a2ad
chore: cleanup acpu inc and dec
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-08-07 19:41:43 +07:00
cd9cc01b77
fix: set default TTL for APCu cache as per docs
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-08-07 19:41:41 +07:00
3ffcfb1dab
Merge pull request #47069 from nextcloud/fix/noid/display-message-on-no-migration-attributes
...
fix(migration-preview): display a message if no attributes set
2024-08-07 11:48:20 +07:00
2b38d6ae7e
fix(session): Log when session_* calls are slow
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2024-08-07 09:02:10 +07:00
6ad6fa6425
fix(migration-preview): display a message if no attributes set
...
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
2024-08-06 22:23:12 +07:00
8a5bc4778b
Merge pull request #38364 from joshtrichards/jr-preview-libgd-webp-animation-bypass
2024-08-06 17:56:14 +07:00
2d8676fa5d
Merge pull request #47065 from nextcloud/fix/group-oc
2024-08-06 17:52:01 +07:00
42650f6773
Merge pull request #46967 from nextcloud/fix/share-not-found
2024-08-06 17:45:44 +07:00
e6457aa9c4
Merge pull request #46985 from nextcloud/feat/email-share-format
2024-08-06 17:40:47 +07:00
db28aa8cd1
fix(files_sharing): show proper share not found error message
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2024-08-06 16:25:10 +07:00
Julius Härtl
Joas Schilling
Daniel Kesselberg
Robin Appelman
Christoph Klaffl
Ferdinand Thiessen
Joas Schilling
John Molakvoæ
Hailong Wang
S1m
Christoph Wurst
Christoph Wurst
Côme Chilliet
Holger Hees
Côme Chilliet
Louis Chemineau
Julien Veyssier
Andy Scherzinger
Maxence Lange
skjnldsv