Commit graph

11372 commits

Author SHA1 Message Date
Julien Veyssier
7170c03f0e
Merge pull request #28009 from nextcloud/enh/21045/quota-restrictions
Add quota restrictions options
2021-07-30 10:26:56 +02:00
Julien Veyssier
416d10f76c refs #21045 add app config to disable unlimited quota and to set max quota
avoid unlimited quota as default_quota fallback value if unlimited quota is not allowed
avoid getting/setting/displaying unlimited default quota if not allowed
implement tests for unlimited quota restrictions

Signed-off-by: Julien Veyssier <eneiluj@posteo.net>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>
2021-07-29 19:31:36 +00:00
Carl Schwan
28970563a2
Remove some mentions of ownCloud from our api documentation
Signed-off-by: Carl Schwan <carl@carlschwan.eu>
2021-07-29 15:56:30 +02:00
Julius Härtl
db7ffb0bf9
Merge pull request #28175 from nextcloud/jail-search-root 2021-07-29 09:27:53 +02:00
Lukas Reschke
d4352aaace
Merge pull request #27886 from ecsecta/keep_pw_based_authntoken_alive_on_pwlesslogin
Keep pw based auth tokens valid when pw-less login happens
2021-07-27 14:37:15 +02:00
Robin Appelman
97aadbe46c
dont apply jail search filter is on the root
the extra '/' breaks things and the filter wouldn't do anything anyway except making the databases job harder

Signed-off-by: Robin Appelman <robin@icewind.nl>
2021-07-26 17:44:52 +02:00
Julius Härtl
b31c08e536
Merge pull request #28075 from nextcloud/enh/noid/admin_audit-report-full-path
Admin Audit - Sharing: createShare - report the full path
2021-07-26 12:35:48 +02:00
Vincent Petry
41ddbec40f
Allow empty Redis config
When Redis config is empty, use defaults.
However when a Redis cluster config is specified, the "seeds" attribute
is mandatory.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>
2021-07-23 09:53:06 +02:00
szaimen
4570bb4f65 Admin Audit - Sharing: createShare - report the full path
Signed-off-by: szaimen <szaimen@e.mail.de>
2021-07-22 14:20:05 +00:00
John Molakvoæ
f14b8aa34b
Merge pull request #27888 from nextcloud/fix/redis-auth 2021-07-22 12:47:26 +02:00
John Molakvoæ (skjnldsv)
6e00fe8c26
Properly support RedisCluster
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2021-07-22 07:42:26 +02:00
Lukas Reschke
63b4450141
Merge pull request #28082 from nextcloud/improve-exception-serializer
Sanitize more functions from the encryption app
2021-07-21 16:19:21 +02:00
Lukas Reschke
b3ddc09895 Sanitize more functions from the encryption app
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2021-07-21 11:18:35 +02:00
Julius Härtl
b6a24f87a5
Merge pull request #28077 from nextcloud/heicPerformance 2021-07-21 10:27:19 +02:00
tobiasKaminsky
f62ec2b47c
Disable HEIC image preview provider for performance concerns
Signed-off-by: tobiasKaminsky <tobias@kaminsky.me>
2021-07-21 09:14:20 +02:00
John Molakvoæ (skjnldsv)
ed10d85ff3
Support redis user password auth and tls encryption
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2021-07-20 17:57:33 +02:00
Daniel Kesselberg
74fa8f3f84
Mask password for Redis and RedisCluster on connection failure
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2021-07-19 19:52:25 +02:00
Tobias Assmann
ee049a159b prevent the invalidation of pw based authn tokens on a pw less login
Signed-off-by: Tobias Assmann <tobias.assmann@ecsec.de>
2021-07-16 14:31:06 +02:00
Joas Schilling
f86f594a3a
Merge pull request #27860 from J0WI/alphanumeric-rnd
Introduce ISecureRandom::CHAR_ALPHANUMERIC
2021-07-16 12:46:20 +02:00
Julius Härtl
3e67637a4a
Merge pull request #26463 from Worteks/fix-s3proxy 2021-07-14 23:32:05 +02:00
blizzz
5a22b0ac67
Merge pull request #27884 from nextcloud/enh/cloud-id-local
Allow to get a local cloud id without going through the contacts manager
2021-07-14 23:18:51 +02:00
Julius Härtl
7179002600
Allow to get a local cloud id without going through the contacts manager
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2021-07-14 16:08:05 +02:00
Julius Härtl
59f0fc0e2b
Merge pull request #27761 from nextcloud/bugfix/noid/also-hide-group-from-direct-match
Also hide group from direct matches
2021-07-14 13:07:00 +02:00
Julius Härtl
f43c2b45d8
Directly return cloud id from user
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2021-07-14 09:52:15 +02:00
Julius Härtl
e1f644a2ae
Merge pull request #27631 from yan12125/php8-fix-error-reporting 2021-07-13 08:52:18 +02:00
Julius Härtl
3860dad9ea
Merge pull request #26481 from ghost/fdroid 2021-07-13 08:49:59 +02:00
Julius Härtl
0031152de1
Merge pull request #27852 from nextcloud/bugfix/noid/allow-casting-query-functions 2021-07-13 08:48:49 +02:00
Chih-Hsuan Yen
16c4991db6
Correctly skip suppressed errors in PHP 8.0
Applies the suggested transformation mentioned in
https://www.php.net/manual/en/migration80.incompatible.php,

> The @ operator will no longer silence fatal errors (E_ERROR,
> E_CORE_ERROR, E_COMPILE_ERROR, E_USER_ERROR, E_RECOVERABLE_ERROR,
> E_PARSE). Error handlers that expect error_reporting to be 0 when
> @ is used, should be adjusted to use a mask check instead

The new code still works on PHP 7, as error_reporting() already
returns 0 when diagnostics are suppressed.

This fixes https://github.com/nextcloud/server/issues/25807 in PHP 8.0.
For PHP 7.x, https://github.com/nextcloud/server/pull/22243 suppresses
the E_NOTICE message from the second session_start() call with the error
suppression operator @, and thus those E_NOTICE messages are still
logged in PHP 8.0.

See also https://github.com/nextcloud/server/issues/25806

Signed-off-by: Chih-Hsuan Yen <yan12125@gmail.com>
2021-07-13 13:23:03 +08:00
Lukas Reschke
84d9b17dc7
Check for !== false instead
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2021-07-12 15:06:30 +02:00
Lukas Reschke
b0cef8827d Check if dns_get_record returns non-false
`dns_get_record` can return false which results in exceptions such as
the ones shown in https://github.com/nextcloud/server/issues/27870.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2021-07-12 13:15:20 +02:00
J0WI
3b656446af Introduce ISecureRandom::CHAR_ALPHANUMERIC
Signed-off-by: J0WI <J0WI@users.noreply.github.com>
2021-07-08 15:11:31 +02:00
Joas Schilling
aae16c21e6
Allow casting query functions as well
Signed-off-by: Joas Schilling <coding@schilljs.com>
2021-07-07 14:20:24 +02:00
Sanpi
81c272a8a5 Fixes recursion count incrementation
Signed-off-by: Sanpi <sanpi@homecomputing.fr>
2021-07-07 12:00:00 +00:00
J0WI
b344ff1a67 Refactor getEncryptionModule routine 2021-07-06 19:20:32 +02:00
kesselb
9f04a7c71e
Merge pull request #27801 from nextcloud/enh/noid/hardening-dns-pin-middleware
Ignore subdomain for soa queries
2021-07-06 18:55:25 +02:00
MichaIng
0304eea58d
Fix in locking cache check
The intention obviously was to check whether $lockingCacheClass is defined, and existing class, and available. It was however checked whether the $distributedCacheClass is an existing class, which would have caused an exception already in the previous distributed cache check.

Signed-off-by: MichaIng <micha@dietpi.com>
2021-07-05 23:11:13 +02:00
Christoph Wurst
26efbe982e
Merge pull request #27794 from nextcloud/fix/clarify-lazy-event-listener-container
Clarify that lazy event listeners are built from the server container
2021-07-05 21:13:53 +02:00
Daniel Kesselberg
b6530e5e82
Ignore subdomain for soa queries
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2021-07-05 20:29:06 +02:00
Pytal
04441d5012
Merge pull request #27767 from nextcloud/enh/20515/maintenance-mode-info
Improve maintenance mode info
2021-07-05 10:44:10 -07:00
Lukas Reschke
8037a4be57
Merge pull request #27799 from nextcloud/bug/26425/check-return-encrypt
Throw exception if encrypting the data failed.
2021-07-05 18:53:32 +02:00
John Molakvoæ
b396aee333
Merge pull request #27758 from nullspoon/fix-dns-pinning 2021-07-05 17:37:51 +02:00
Christoph Wurst
a6a31bb419
Clarify that lazy event listeners are built from the server container
Ref https://github.com/nextcloud/server/issues/27793

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2021-07-05 12:11:54 +02:00
Daniel Kesselberg
0a15043f69
Throw exception if encrypting the data failed.
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2021-07-05 10:23:16 +02:00
Daniel Kesselberg
c91bb98e5c
Check that pdo is installed
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2021-07-05 09:49:05 +02:00
HouraisanNEET
0ba0189260 Add F-Droid
Signed-off-by: HouraisanNEET <HouraisanNEET@users.noreply.github.com>
2021-07-04 21:44:55 +08:00
Aaron Ball
484913dc31
Fix DnsPinMiddleware resolve pinning bug
Libcurl expects the value of the CURLOPT_RESOLVE configurations to be an
array of strings, those strings containing a comma delimited list of
resolved IPs for each host:port combination.

The original code here does create that array with the host:port:ip
combination, but multiple ips for a single host:port result in
additional array entries, rather than adding them to the end of the
string with a comma. Per the libcurl docs, the `CURLOPT_RESOLVE` array
entries should match the syntax `host:port:address[,address]`.

This creates a function-scoped associative array which uses `host:port`
as the key (which are supposed to be unique and this ensures that), and
the value is an array containing IP strings (ipv4 or ipv6). Once the
associative array is populated, it is then set to the CURLOPT_RESOLVE
array, imploding the ip arrays using a comma delimiter so the array
syntax matches the expected by libcurl.

Note that this reorders the "foreach ip" and "foreach port" loops.
Rather than looping over ips then ports, we now loop over ports then
ips, since ports are part of the unique host:port map, and multiple ips
can exist therein.

Signed-off-by: Aaron Ball <nullspoon@oper.io>
2021-07-02 16:08:44 -06:00
Robin Appelman
9884344230
dont include folder being search in in the results
Signed-off-by: Robin Appelman <robin@icewind.nl>
2021-07-02 16:32:25 +02:00
szaimen
37ff07b9e1 Improve maintenance mode info
Signed-off-by: szaimen <szaimen@e.mail.de>
2021-07-02 13:54:33 +02:00
Joas Schilling
af03f5d516
Also hide group from direct matches
Signed-off-by: Joas Schilling <coding@schilljs.com>
2021-07-02 09:47:42 +02:00
blizzz
7589d5a176
Merge pull request #27533 from Rid/master
Fix scanner mistaking socket files for directories
2021-07-01 17:36:06 +02:00