1. 27 Mar, 2015 2 commits
  2. 26 Mar, 2015 4 commits
  3. 25 Mar, 2015 1 commit
  4. 24 Mar, 2015 1 commit
  5. 23 Mar, 2015 1 commit
  6. 15 Mar, 2015 1 commit
  7. 06 Mar, 2015 1 commit
  8. 02 Mar, 2015 1 commit
    • Lukas Reschke's avatar
      Let users configure security headers in their Webserver · bbd5f284
      Lukas Reschke authored
      Doing this in the PHP code is not the right approach for multiple reasons:
      
      1. A bug in the PHP code prevents them from being added to the response.
      2. They are only added when something is served via PHP and not in other cases (that makes for example the newest IE UXSS which is not yet patched by Microsoft exploitable on ownCloud)
      3. Some headers such as the Strict-Transport-Security might require custom modifications by administrators. This was not possible before and lead to buggy situations.
      
      This pull request moves those headers out of the PHP code and adds a security check to the admin settings performed via JS.
      bbd5f284
  9. 01 Mar, 2015 1 commit
  10. 28 Feb, 2015 3 commits
  11. 27 Feb, 2015 1 commit
  12. 24 Feb, 2015 1 commit
    • Lukas Reschke's avatar
      Move UTF-8 check to setup · 06cf93e6
      Lukas Reschke authored
      Nobody reads the warnings anyways and so we should enforce it at installation time... Also allows us to get rid of some duplicated code.
      
      To test change the `default_charset` to something other than `utf-8` or `UTF-8`, both should work fine with that change here. An error should then get shown.
      
      We already set those default charsets in the shipped .user.ini and .htaccess
      06cf93e6
  13. 17 Feb, 2015 1 commit
  14. 12 Feb, 2015 1 commit
  15. 09 Feb, 2015 1 commit
  16. 06 Feb, 2015 1 commit
  17. 05 Feb, 2015 1 commit
  18. 04 Feb, 2015 5 commits
  19. 20 Jan, 2015 1 commit
  20. 07 Jan, 2015 2 commits
  21. 09 Dec, 2014 1 commit
  22. 06 Dec, 2014 1 commit
  23. 04 Dec, 2014 1 commit
  24. 02 Dec, 2014 1 commit
  25. 25 Nov, 2014 1 commit
    • Lukas Reschke's avatar
      Allow read-only configuration · fc116f56
      Lukas Reschke authored
      Workaround required for IIS setups running ownCloud to prevent dataloss.
      
      Long-term solution would be to move some configuration settings to the database
      fc116f56
  26. 21 Nov, 2014 1 commit
  27. 06 Nov, 2014 1 commit
  28. 03 Nov, 2014 2 commits