ac15544703
Merge pull request #60299 from nextcloud/fix/remove-iservercontainer-from-core-apps
...
Chore: Remove references to deprecated interface IServerContainer
2026-05-12 07:48:58 +02:00
9680004b58
chore: Remove almost all uses of deprecated IServerContainer in lib/private
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2026-05-11 16:22:22 +02:00
04bd872fd2
style(http-client): use explicit bitmask comparison for CURL_VERSION_BROTLI
...
Signed-off-by: ernolf <raphael.gradenwitz@googlemail.com >
2026-05-11 14:06:57 +02:00
c1cd4de1cd
fix(http-client): detect brotli support via libcurl, not PHP extension
...
- Fixes a regression introduced in #55433 .
Signed-off-by: ernolf <raphael.gradenwitz@googlemail.com >
2026-05-09 03:23:27 +02:00
e5b1799079
chore: add missing Override attribute to test files
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de >
2026-04-28 21:29:28 +02:00
5bc0ba6a51
fix(DnsPinning): Ensure to always lookup based on FQDN
...
Signed-off-by: David Dreschner <david.dreschner@nextcloud.com >
2026-03-22 20:34:55 +01:00
0bfa86b02d
feat(http-client): add option to add instance URL to HTTP client user-agent
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr >
2026-02-19 17:57:40 +01:00
932523e844
style(tests): apply cs-fixer formatting to ClientTest
...
Signed-off-by: ernolf <raphael.gradenwitz@googlemail.com >
2026-01-09 01:29:59 +01:00
510c203dfe
Merge branch 'master' into ernolf/enh/http2-brotli-client
...
Signed-off-by: Raphael Gradenwitz <39901936+ernolf@users.noreply.github.com >
2026-01-08 21:02:07 +01:00
adf7ea5f0b
perf: log slow DNS operations
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2026-01-08 11:22:15 +01:00
0c3a872908
feat(CertificateManager): Add option to specify the default certificates bundle path
...
Signed-off-by: provokateurin <kate@provokateurin.de >
2025-12-01 10:47:23 +01:00
b91034b3cf
chore: Add server version to default crawler user agent
...
Signed-off-by: Marcel Müller <marcel-mueller@gmx.de >
2025-11-07 11:20:56 +01:00
b6ea2bc0f5
refactor(http-client): use direct HTTP/2 cURL hint and align tests
...
Signed-off-by: ernolf <raphael.gradenwitz@googlemail.com >
2025-10-22 12:17:17 +02:00
65aa731ef3
test: add unit test for Accept-Encoding with Brotli support
...
Signed-off-by: ernolf <raphael.gradenwitz@googlemail.com >
2025-09-30 18:01:38 +02:00
aa15f9d16d
chore: run rector
...
Signed-off-by: Robin Appelman <robin@icewind.nl >
2025-07-01 22:45:52 +02:00
5981b7eb51
chore: apply new CSFixer rules
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de >
# Conflicts:
# apps/settings/lib/SetupChecks/PhpOpcacheSetup.php
2025-07-01 16:26:50 +02:00
3561937816
chore: run rector on tests with new rule
...
Signed-off-by: Robin Appelman <robin@icewind.nl >
2025-06-12 18:38:29 +02:00
29e39c0a2e
chore: run rector on tests
...
Signed-off-by: Robin Appelman <robin@icewind.nl >
2025-06-12 18:31:58 +02:00
c24f5fb256
test: Finish migrating tests/Core/ to PHPUnit 10 compatible code
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2025-05-02 16:47:42 +02:00
387cd8b771
fix: do not query CNAME if A succeeded already
...
Signed-off-by: georglauterbach <44545919+georglauterbach@users.noreply.github.com >
2024-11-06 20:21:38 +01:00
6be00432b7
chore: always execute parse_url in preventLocalAddress
...
This change should make it easier to spot wrong uses of the HTTP client on development setups where allow_local_remote_servers is usually true.
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de >
2024-10-01 18:00:47 +02:00
9836e9b164
chore(deps): Update nextcloud/coding-standard to v1.3.1
...
Signed-off-by: provokateurin <kate@provokateurin.de >
2024-09-19 14:21:20 +02:00
49dd79eabb
refactor: Add void return type to PHPUnit test methods
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2024-09-15 22:32:31 +02:00
af6de04e9e
style: update codestyle for coding-standard 1.2.3
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de >
2024-08-25 19:34:58 +02:00
1f7e2ba599
chore: Add SPDX header
...
Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de >
2024-05-13 17:41:36 +02:00
51739ad1ac
Adjust tests to match new expected exception
...
Signed-off-by: Robin Kluth <Commifreak@users.noreply.github.com >
2024-02-24 11:34:34 +01:00
33e1c8b236
fix(security): Handle idn_to_utf8 returning false
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2023-12-04 10:38:46 +01:00
f8f985602b
test: add tests for dns pin middleware
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de >
2023-09-12 14:04:23 +02:00
eab46bdfe6
feat: add switch to disable dns pinning
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de >
2023-08-29 18:03:54 +02:00
f57c12b14e
Fix various deprecation warnings in tests on PHP 8.3
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2023-08-14 18:13:12 +02:00
ec6728d710
feat(HTTPClient): Provide wrapped access to Guzzle's asyncRequest()
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2023-06-27 15:53:57 +02:00
e7ab30f5d8
log performance events for http requests
...
Signed-off-by: Robin Appelman <robin@icewind.nl >
2023-04-28 15:37:57 +02:00
8d5165e8dc
Adapt tests to config value typing
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2023-04-05 17:42:14 +02:00
f5c361cf44
composer run cs:fix
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2023-01-20 11:45:08 +01:00
8aea25b5b9
Add remote host validation API
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2022-10-31 16:13:28 +01:00
d4b9b010b0
Rename LocalAddressChecker methods to lower case
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2022-10-27 13:24:28 +02:00
11108e8032
Revert "fix external storages access"
...
Signed-off-by: szaimen <szaimen@e.mail.de >
2022-10-23 22:36:34 +02:00
304c1b9b61
Merge pull request #33087 from nextcloud/fix/30282/external-storages
...
fix external storages access
2022-10-23 10:42:46 +02:00
31117fa7c7
Fix tests for nested v4 in v6
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2022-09-20 12:46:22 +02:00
c083f77e4e
Harden tests for local IP detection in URLs
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2022-09-20 12:14:33 +02:00
c5ffd7ce32
Use Symfony IpUtils to check for local IP ranges
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2022-07-12 12:09:05 +02:00
2ad53742f2
fix external storages access
...
Signed-off-by: szaimen <szaimen@e.mail.de >
2022-07-01 22:52:10 +02:00
6a1510f8ee
Remove some more at matchers in tests/lib
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2022-06-20 10:53:06 +02:00
61f7f13bd8
Migrate from ILogger to LoggerInterface where needed in the tests
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2022-03-24 16:21:26 +01:00
66bdda568a
Fix Guzzle function calls
...
Since 1.7.0 and 2.0 these functions are turned into static methods.
See https://github.com/guzzle/psr7#upgrading-from-function-api
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2021-11-23 09:28:57 +01:00
9dab851931
Adjust test
...
Signed-off-by: Lukas Reschke <lukas@statuscode.ch >
2021-04-06 11:37:47 +00:00
5f3abffe6f
Improve networking checks
...
Whilst we currently state that SSRF is generally outside of our threat model, this is something where we should invest to improve this.
Signed-off-by: Lukas Reschke <lukas@statuscode.ch >
2021-04-06 11:37:47 +00:00
aabd73912e
Type the service registration
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2021-02-10 09:44:24 +01:00
6995223b1e
Add well known handlers API
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2020-12-16 13:13:05 +01:00
dc479aae2d
Improve CertificateManager to not be user context dependent
...
* removes the ability for users to import their own certificates (for external storage)
* reliably returns the same certificate bundles system wide (and not depending on the user context and available sessions)
The user specific certificates were broken in some cases anyways, as they are only loaded if the specific user is logged in and thus causing unexpected behavior for background jobs and other non-user triggered code paths.
Signed-off-by: Morris Jobke <hey@morrisjobke.de >
2020-11-03 00:13:01 +01:00
Kate
Côme Chilliet
ernolf
Ferdinand Thiessen
David Dreschner
Thomas Citharel
Raphael Gradenwitz
Christoph Wurst
provokateurin
Marcel Müller
Robin Appelman
Joas Schilling
georglauterbach
Daniel Kesselberg
Andy Scherzinger
Robin Kluth
Simon L
John Molakvoæ
Lukas Reschke
Morris Jobke