- Feb 02, 2015
-
-
Lukas Reschke authored
The URL was previously encoded twice which leads to getting redirected to a 404 page when the password has been entered incorrect at least once. Testplan: - [ ] Opening `http://localhost/core/index.php?redirect_url=%2Fcore%2Findex.php%2Fsettings%2Fadmin` redirects to the admin page when providing the correct credentials - [ ] Opening `http://localhost/core/index.php?redirect_url=%2Fcore%2Findex.php%2Fsettings%2Fadmin` redirects to the admin page when providing the invalid credentials and then providing valid ones. - [ ] Logging in as admin then going to the admin page and clearing the cookies and refreshing will show the login and when repeating the above test steps you're redirected correctly. Fixes https://github.com/owncloud/core/issues/9804
-
- Jan 23, 2015
-
-
Lukas Reschke authored
HHVM seems to have problems with this at the moment (even setting those values in the php.ini of HHVM doesn't have helped much) and thus the unit test execution failed. So it's better if we disable this check for now for HHVM.
-
- Jan 22, 2015
-
-
Morris Jobke authored
-
Robin Appelman authored
-
Lukas Reschke authored
PHP 5.6 otherwise throws notices for perfectly valid code which results in broken endpoints. Fixes https://github.com/owncloud/core/issues/13592
-
- Jan 14, 2015
-
-
Bernhard Posselt authored
-
Bernhard Posselt authored
-
Bernhard Posselt authored
-
Bernhard Posselt authored
-
Bernhard Posselt authored
-
Bernhard Posselt authored
-
- Jan 13, 2015
-
-
Björn Schießle authored
adapt decrypt all and restore/delete key backups to the new folder structure for encryption key introduced with OC8
-
- Jan 10, 2015
-
-
Lukas Reschke authored
Apparently `normalizer_normalize` is not verifying itself whether the string needs to be converted or not. Or does it at least not very performantly. This simple change leads to a 4% performance gain on the processing of normalizeUnicode. Since this method is called quite often (i.e. for every file path) this has actually a measurable impact. For examples searches are now 200ms faster on my machine. Still not perfect but way to go. Part of https://github.com/owncloud/core/issues/13221
-
- Jan 08, 2015
-
-
Thomas Müller authored
check for working htaccess will result in a dead lock because the server is blocking the request to itself - fixes #13153
-
- Dec 28, 2014
-
-
Lukas Reschke authored
See https://github.com/owncloud/core/pull/13042
-
- Dec 25, 2014
-
-
Frank Karlitschek authored
-
Frank Karlitschek authored
-
- Dec 16, 2014
-
-
Thomas Müller authored
-
- Dec 10, 2014
-
-
Joas Schilling authored
Make DateTimeFormatter a service and adjust tests that have been inaccurate
-
- Dec 05, 2014
-
-
Lukas Reschke authored
Both are removed from 5.4.0 Safe Mode: http://php.net/manual/en/features.safe-mode.php > This feature has been DEPRECATED as of PHP 5.3.0 and REMOVED as of PHP 5.4.0. Magic Quotes: http://php.net/manual/en/security.magicquotes.php > This feature has been DEPRECATED as of PHP 5.3.0 and REMOVED as of PHP 5.4.0.
-
- Dec 04, 2014
-
-
Lukas Reschke authored
-
- Nov 25, 2014
-
-
Joas Schilling authored
-
- Nov 20, 2014
-
-
Lukas Reschke authored
This is not installed by default in all cases and will break the DAV features of ownCloud. Lot's of reports such as https://github.com/owncloud/ios-issues/issues/167#issuecomment-63798507
-
- Nov 03, 2014
-
-
Morris Jobke authored
* add addVendorScript & addVendorStyle * refactoring of addScript and addStyle * add shortcuts vendorScript and vendorStyle
-
- Oct 29, 2014
-
-
Thomas Müller authored
remove translation.php
-
Vincent Petry authored
Added addTranslations and fixed de.js file Fixed de.js to use OC.L10N.register() and use to correct expected format. Added JS unit tests for OC.L10N class Include translations JS script for all apps
-
- Oct 28, 2014
-
-
Lukas Reschke authored
Also support closing tags with no text content given Conflicts: lib/private/template.php
-
- Oct 27, 2014
-
-
Lukas Reschke authored
This commit will make the supported DBs for installation configurable within config.php. By default the following databases are tested: "sqlite", "mysql", "pgsql". The reason behind this is that there might be instances where we want to prevent SQLite to be used by mistake. To test this play around with the new configuration parameter "supportedDatabases".
-
- Oct 24, 2014
-
-
Lukas Reschke authored
It's only reasonable to have proper type hinting here which might even help us to catch bugs.
-
Lukas Reschke authored
There is not much sense in having these files marked executable, we should avoid that.
-
- Oct 20, 2014
-
-
Robin Appelman authored
-
Jörn Friedrich Dreyer authored
suspend encryption proxy when copying skeleton
-
- Oct 15, 2014
-
-
Jörn Friedrich Dreyer authored
-
- Sep 29, 2014
-
-
Lukas Reschke authored
-
Lukas Reschke authored
We do not want to redirect to other domains using the "?redirect_url=" feature. Please notice, that the ownCloud project does not consider open redirectors as security issue.
-
- Sep 23, 2014
-
-
Vincent Petry authored
- Added setup checks in JavaScript - Moved isWebDAVWorking to JS using SetupChecks - Moved internet connection checks to an ajax call that goes through the server
-
- Sep 22, 2014
-
-
Lukas Reschke authored
Fixes https://github.com/owncloud/core/issues/11239
-
Lukas Reschke authored
We do not want to follow redirects to other protocols since they might allow an adversary to bypass network restrictions. (i.e. a redirect to ftp:// might be used to access files of a FTP server which might be in a secure zone and not be reachable from the net but from the ownCloud server) Get final redirect manually using get_headers() Migrate to HTTPHelper class and add unit tests
-
Thomas Müller authored
-
- Sep 18, 2014
-
-
Robin Appelman authored
-