John Molakvoæ
0ae83d6183
Merge pull request #46760 from nextcloud/fix/appframework/csrf-custom-header
2024-07-27 16:27:52 +02:00
Andy Scherzinger
4f2a29adf9
Merge pull request #46672 from nextcloud/fix/preview-invalid-id
...
Avoid using partial file info as valid one
2024-07-25 19:37:30 +02:00
provokateurin
9d1705259c
fix(AppFramework): Allow requests with OCS-APIRequest header to pass CSRF checks
...
Signed-off-by: provokateurin <kate@provokateurin.de >
2024-07-25 17:31:49 +02:00
Marcel Klehr
799ee8fd51
feat(TaskProcessing): Implement enums and default values
...
Signed-off-by: Marcel Klehr <mklehr@gmx.net >
2024-07-25 10:10:31 +02:00
Ferdinand Thiessen
57ed738af2
Merge pull request #46644 from nextcloud/cast-bigint
...
fix: cast to bigint on postgresql
2024-07-24 20:39:04 +02:00
Louis
7266a9ef33
Merge pull request #46418 from nextcloud/artonge/feat/user_admin_delegation
...
feat(users): Add users and group management to admin delegation
2024-07-24 11:15:54 +02:00
SebastianKrupinski
fc0b694d37
feat: mail provider backend
...
Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com >
2024-07-23 16:20:36 -04:00
Robin Appelman
16c184e2cb
fix: cast to bigint on postgresql
...
Signed-off-by: Robin Appelman <robin@icewind.nl >
2024-07-23 14:41:13 +02:00
Julius Härtl
6c1e896a03
fix: Ignore preview requests for invalid file ids
...
Signed-off-by: Julius Härtl <jus@bitgrid.net >
2024-07-22 22:32:34 +02:00
Louis Chemineau
dff8815449
feat(users): Add support for admin delegation for users and groups management
...
Signed-off-by: Louis Chemineau <louis@chmn.me >
2024-07-22 17:17:35 +02:00
Julien Veyssier
fffc784769
feat(taskprocessing): add support for webhooks (http or AppAPI) in the task processing API
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net >
2024-07-22 11:34:29 +02:00
Stephan Orbaugh
9ed2d3e495
Merge pull request #46571 from nextcloud/chore/migrate-to-filenamevalidator
...
refactor: Migrate some legacy and core functions to `IFilenameValidator`
2024-07-22 10:40:50 +02:00
Andy Scherzinger
c2a571e435
Merge pull request #46473 from nextcloud/feat/restrict_admin_to_ips
...
feat(security): restrict admin actions to IP ranges
2024-07-22 10:10:42 +02:00
Ferdinand Thiessen
9716b0d735
refactor: Migrate some legacy and core functions to IFilenameValidator
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de >
2024-07-19 19:41:46 +02:00
Joas Schilling
7395211c1a
Merge pull request #46605 from nextcloud/bugfix/noid/test-more-oracle-versions
...
fix(deps): Deprecate functionality deprecated by doctrine and test on more oracle versions
2024-07-19 16:40:49 +02:00
Joas Schilling
047479ccf9
feat(security): Add public API to allow validating IP Ranges and checking for "in range"
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com >
2024-07-19 16:28:03 +02:00
Benjamin Gaussorgues
202e5b1e95
feat(security): restrict admin actions to IP ranges
...
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com >
2024-07-19 16:28:03 +02:00
Marcel Klehr
a3c3eab09c
Merge pull request #46368 from nextcloud/fix/task-processing
...
TaskProcessing follow-up
2024-07-19 12:38:30 +02:00
Joas Schilling
f6238d35bd
fix(test): Make the test less flaky
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2024-07-19 11:21:16 +02:00
Joas Schilling
eeb6ddb176
fix(db): Deprecate IExpressionBuilder::or() and IExpressionBuilder::and() without parameters
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2024-07-19 11:21:16 +02:00
Joas Schilling
829f2b9bc7
fix(db): Promote the use of getDatabaseProvider to reduce the impage of removed upstream platforms
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2024-07-19 11:21:14 +02:00
Joas Schilling
a4c1d7291f
fix(db): Use createSchemaManager() method as getSchemaManager() is deprecated
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2024-07-19 11:21:11 +02:00
Robin Appelman
64ca4b832d
Merge pull request #46583 from nextcloud/filecache-sharding-compat
...
Make filecache queries compatible with sharding
2024-07-19 09:49:45 +02:00
provokateurin
e5dcdfb9e0
feat(Security): Warn about using annotations instead of attributes
...
Signed-off-by: provokateurin <kate@provokateurin.de >
2024-07-18 11:25:32 +02:00
Robin Appelman
c5b687271b
fix: make batch propagator work with sharding restrictions
...
Signed-off-by: Robin Appelman <robin@icewind.nl >
2024-07-17 19:16:07 +02:00
Robin Appelman
0931492ff0
fix: make usermountcache compatible with sharding
...
Signed-off-by: Robin Appelman <robin@icewind.nl >
2024-07-17 19:16:05 +02:00
Richard Steinmetz
718ef5dea5
Merge pull request #46510 from nextcloud/feat/info-xml-backends
...
feat: hide caldav server settings if no app uses the caldav backend
2024-07-17 18:57:08 +02:00
Julien Veyssier
d37dd4b9a9
feat(settings/admin/ai): fix tests
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net >
2024-07-17 15:24:19 +02:00
Marcel Klehr
969cc52851
fix(TaskProcessing): Run cs:fix
...
Signed-off-by: Marcel Klehr <mklehr@gmx.net >
2024-07-17 13:55:55 +02:00
Marcel Klehr
61ebfad724
fix(TaskProcessing): fix tests
...
Signed-off-by: Marcel Klehr <mklehr@gmx.net >
2024-07-17 13:55:55 +02:00
Marcel Klehr
f1bb43dd55
test(TaskProcessing): Add test for setTaskResult with fileIds
...
Signed-off-by: Marcel Klehr <mklehr@gmx.net >
2024-07-17 13:55:55 +02:00
Joas Schilling
05888991d7
Merge pull request #46419 from nextcloud/bugfix/noid/limit-logo-size-for-outlook
...
fix(mail): Fix big logos in mail templates for Outlook
2024-07-17 11:54:47 +02:00
Joas Schilling
693a81bfa3
fix(mail): Fix big logos in mail templates for Outlook
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2024-07-17 09:24:55 +02:00
Ferdinand Thiessen
1b41e8f566
Merge pull request #46538 from nextcloud/fix/use-filename-validator
...
refactor: Migrate filename validation from `Storage` and `Util` to `FilenameValidator`
2024-07-16 17:42:40 +02:00
Robin Appelman
decae5a45a
Merge pull request #46547 from nextcloud/query-builder-connection
...
feat: allow running QueryBuilder queries on different connections
2024-07-16 17:38:28 +02:00
Ferdinand Thiessen
322b3946d9
fix(dav): Verify target path in setName instead of source path
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de >
2024-07-16 12:57:11 +02:00
Ferdinand Thiessen
f4ede27cdb
refactor: Remove deprecated Util function for filename validation to FilenameValidator
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de >
2024-07-16 12:49:10 +02:00
Ferdinand Thiessen
69341e4306
refactor: Migrate filename validation logic from Storage to FilenameValidator
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de >
2024-07-16 12:49:09 +02:00
Richard Steinmetz
e42bceac9f
feat: hide caldav server settings if no app uses the caldav backend
...
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud >
2024-07-16 09:18:33 +02:00
Robin Appelman
9de6190ec4
feat: allow running QueryBuilder queries on different connections
...
Signed-off-by: Robin Appelman <robin@icewind.nl >
2024-07-15 22:41:04 +02:00
Ferdinand Thiessen
bdbeabafa7
feat: Add forbidden_filename_basenames config option
...
This allows to configure forbidden filenames (the full filename like `.htaccess`)
and also forbidden basenames like `com0` where `com0`, `com0.txt` and `com0.tar.gz` will match.
We need this as only using basenames was too restrictive and will cause problems on some systems when updating.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de >
2024-07-15 19:39:18 +02:00
skjnldsv
967b3848e0
fix(files_sharing): phpunit & openapi fixes
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com >
2024-07-12 20:14:30 +02:00
Benjamin Gaussorgues
e5275dbada
feat: don't count failed CSRF as failed login attempt
...
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com >
2024-07-11 09:27:33 +02:00
Ferdinand Thiessen
46f1efac41
feat: Add IFilenameValidator to have one consistent place for filename validation
...
Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de >
Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com >
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de >
2024-07-09 15:04:34 +02:00
Christopher Ng
48b69c53dc
test: Test hash validation
...
Signed-off-by: Christopher Ng <chrng8@gmail.com >
2024-07-04 17:05:50 -07:00
Hoang Pham
9a2f026bd6
feat: support excalidraw file
...
Signed-off-by: Hoang Pham <hoangmaths96@gmail.com >
2024-07-04 11:09:21 +02:00
Joas Schilling
a1d3b5f1a3
fix(tests): Remove output when running tests
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2024-07-03 15:51:36 +02:00
Daniel
0f95c6e471
Merge pull request #46185 from nextcloud/debt/noid/migrate-background-commands-to-iappconfig
...
refactor: simplify background commands
2024-07-02 11:21:55 +02:00
Daniel
92acbb0d39
Merge pull request #45766 from nextcloud/feat/ooo-replacement
...
Feat: Allow users to select another user as their out-of-office replacement
2024-07-01 23:25:43 +02:00
Hamza Mahjoubi
a9774741e8
Feat: Allow users to select another user as their out-of-office replacement
...
Signed-off-by: Hamza Mahjoubi <hamzamahjoubi221@gmail.com >
2024-07-01 15:10:16 +02:00