Vincent Petry
1eca72d417
Fix share controller to accept share attributes alone
...
Signed-off-by: Vincent Petry <vincent@nextcloud.com>
2022-08-03 13:24:18 +02:00
Vincent Petry
f1ab964819
Add share attributes + prevent download permission
...
Makes it possible to store download permission
Signed-off-by: Vincent Petry <vincent@nextcloud.com>
2022-08-03 13:24:13 +02:00
blizzz
6088f720bd
Merge pull request #33439 from nextcloud/backport/32958/stable24
...
[stable24] Fix file public link permissions if public upload is not enabled
2022-08-03 11:27:10 +02:00
Vincent Petry
3a3a52de83
Merge pull request #33407 from nextcloud/backport/stable24/one-time-password
...
[stable24] Handle one time and large passwords
2022-08-03 09:07:54 +02:00
dependabot[bot]
313e336d22
Merge pull request #33438 from nextcloud/dependabot/npm_and_yarn/stable24/clipboard-2.0.11
2022-08-02 18:32:19 +00:00
dependabot[bot]
996cdbf0a7
Bump clipboard from 2.0.10 to 2.0.11
...
Bumps [clipboard](https://github.com/zenorocha/clipboard.js ) from 2.0.10 to 2.0.11.
- [Release notes](https://github.com/zenorocha/clipboard.js/releases )
- [Commits](https://github.com/zenorocha/clipboard.js/compare/v2.0.10...v2.0.11 )
---
updated-dependencies:
- dependency-name: clipboard
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2022-08-02 17:51:56 +00:00
Julien Veyssier
008a9f568d
fix share manager tests
...
Signed-off-by: Julien Veyssier <eneiluj@posteo.net>
2022-08-02 14:56:59 +00:00
Julien Veyssier
933bd27ea9
don't reduce file public link permissions if public upload is not enabled
...
Signed-off-by: Julien Veyssier <eneiluj@posteo.net>
2022-08-02 14:56:59 +00:00
dependabot[bot]
8506e44bd6
Merge pull request #33370 from nextcloud/dependabot/npm_and_yarn/stable24/nextcloud/moment-1.2.1
2022-08-02 14:24:43 +00:00
dependabot[bot]
0d286d99d6
Bump @nextcloud/moment from 1.2.0 to 1.2.1
...
Bumps [@nextcloud/moment](https://github.com/nextcloud/nextcloud-moment ) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/nextcloud/nextcloud-moment/releases )
- [Changelog](https://github.com/nextcloud/nextcloud-moment/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nextcloud/nextcloud-moment/compare/v1.2.0...v1.2.1 )
---
updated-dependencies:
- dependency-name: "@nextcloud/moment"
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2022-08-02 15:29:58 +02:00
blizzz
039fd75a88
Merge pull request #33353 from nextcloud/backport/33031/stable24
...
[stable24] Improve local IP detection
2022-08-02 12:36:10 +02:00
Côme Chilliet
38eb0df671
Fix autoloader
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-08-01 15:13:34 +02:00
blizzz
66d4f6744e
Merge pull request #33391 from nextcloud/backport/33280/stable24
...
[stable24] handle AccessDenied error when checking if external s3 support versions
2022-08-01 15:10:36 +02:00
blizzz
e70ffdf556
Merge pull request #33382 from nextcloud/backport/33378/stable24
...
[stable24] don't set `null` as a bundle path
2022-08-01 15:09:54 +02:00
Vincent Petry
9070dbd7af
Merge pull request #33096 from nextcloud/dependabot/npm_and_yarn/stable24/handlebars-loader-1.7.2
...
Bump handlebars-loader from 1.7.1 to 1.7.2
2022-08-01 15:03:11 +02:00
Vincent Petry
a760b3452b
Merge pull request #32840 from nextcloud/dependabot/npm_and_yarn/stable24/vue-router-3.5.4
...
Bump vue-router from 3.5.3 to 3.5.4
2022-08-01 15:02:28 +02:00
Côme Chilliet
5daf307a0d
Remove call to undefined function, fix typing
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-08-01 12:24:39 +02:00
Côme Chilliet
ead97ba46d
Align copied file with our code style
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-08-01 11:34:28 +02:00
Côme Chilliet
7d069cd30e
Merge pull request #33352 from nextcloud/fix/bump-sabre-dav-to-4.4.0-in-stable24
...
Bump sabre dav to 4.4.0 in stable24
2022-08-01 11:32:37 +02:00
Côme Chilliet
d3a2fd02c2
Copy IpUtils from Symfony to avoid new dependency on backport
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-08-01 11:30:51 +02:00
Carl Schwan
f4795f6dac
Handle one time and large passwords
...
For passwords bigger than 250 characters, use a bigger key since the
performance impact is minor (around one second to encrypt the password).
For passwords bigger than 470 characters, give up earlier and throw
exeception recommanding admin to either enable the previously enabled
configuration or use smaller passwords.
This adds an option to disable storing passwords in the database. This
might be desirable when using single use token as passwords or very
large passwords.
Signed-off-by: Carl Schwan <carl@carlschwan.eu>
2022-07-29 16:15:38 +02:00
Matthieu Gallien
7be4691855
handle AccessDenied error when checking if external s3 support versions
...
Signed-off-by: Matthieu Gallien <matthieu.gallien@nextcloud.com>
2022-07-28 10:27:50 +00:00
dependabot[bot]
1edc51c639
Bump vue-router from 3.5.3 to 3.5.4
...
Bumps [vue-router](https://github.com/vuejs/router ) from 3.5.3 to 3.5.4.
- [Release notes](https://github.com/vuejs/router/releases )
- [Changelog](https://github.com/vuejs/router/blob/main/CHANGELOG.md )
- [Commits](https://github.com/vuejs/router/commits )
---
updated-dependencies:
- dependency-name: vue-router
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2022-07-27 19:48:40 +00:00
Robin Appelman
afdeae2cc2
don't set null as a bundle path
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2022-07-27 13:46:34 +00:00
dependabot[bot]
6a3cd32a2d
Merge pull request #33369 from nextcloud/dependabot/npm_and_yarn/stable24/jsdoc-3.6.11
2022-07-27 00:59:48 +00:00
dependabot[bot]
50ea3ae110
Bump jsdoc from 3.6.10 to 3.6.11
...
Bumps [jsdoc](https://github.com/jsdoc/jsdoc ) from 3.6.10 to 3.6.11.
- [Release notes](https://github.com/jsdoc/jsdoc/releases )
- [Changelog](https://github.com/jsdoc/jsdoc/blob/3.6.11/CHANGES.md )
- [Commits](https://github.com/jsdoc/jsdoc/compare/3.6.10...3.6.11 )
---
updated-dependencies:
- dependency-name: jsdoc
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-07-26 22:54:37 +00:00
Vincent Petry
b21f79e7df
Merge pull request #33363 from nextcloud/dependabot/npm_and_yarn/stable24/dompurify-2.3.10
...
Bump dompurify from 2.3.8 to 2.3.10
2022-07-26 23:17:21 +02:00
Vincent Petry
392327b135
Merge pull request #33132 from nextcloud/backport/33090/stable24
...
[stable24] DAV custom props: catch Exception and rollback transaction in case
2022-07-26 23:11:14 +02:00
Vincent Petry
19a52f4507
Merge pull request #33350 from nextcloud/backport/33315/stable24
...
[stable24] Reset user status based on message ID only
2022-07-26 22:49:31 +02:00
Anna
5f743c3c1d
Merge pull request #33364 from nextcloud/backport/33341/stable24
...
[stable24] Don't try to purge objects from the birthday calendar when it doesn't exist
2022-07-26 20:56:34 +02:00
dependabot[bot]
71b106c342
Bump dompurify from 2.3.8 to 2.3.10
...
Bumps [dompurify](https://github.com/cure53/DOMPurify ) from 2.3.8 to 2.3.10.
- [Release notes](https://github.com/cure53/DOMPurify/releases )
- [Commits](https://github.com/cure53/DOMPurify/compare/2.3.8...2.3.10 )
---
updated-dependencies:
- dependency-name: dompurify
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2022-07-26 17:58:24 +00:00
Thomas Citharel
6d81423c35
Don't try to purge objects from the birthday calendar when it doesn't exist
...
Doesn't matter much as it's been recreated afterwards with (ensureCalendarExists).
Closes #29617
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-07-26 17:26:01 +00:00
blizzz
91c2a60424
Merge pull request #31984 from nextcloud/dependabot/npm_and_yarn/stable24/underscore-1.12.1
...
Bump underscore from 1.12.0 to 1.12.1
2022-07-26 19:21:38 +02:00
Vincent Petry
b0be67fb74
Fix core tests by stubbing debounce
...
Signed-off-by: Vincent Petry <vincent@nextcloud.com>
2022-07-26 15:47:12 +02:00
dependabot[bot]
6c81f543b2
Bump underscore from 1.12.0 to 1.12.1
...
Bumps [underscore](https://github.com/jashkenas/underscore ) from 1.12.0 to 1.12.1.
- [Release notes](https://github.com/jashkenas/underscore/releases )
- [Commits](https://github.com/jashkenas/underscore/compare/1.12.0...1.12.1 )
---
updated-dependencies:
- dependency-name: underscore
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2022-07-26 13:11:29 +00:00
Côme Chilliet
d0ceedf054
Use Symfony IpUtils to check for local IP ranges
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 09:42:33 +00:00
Côme Chilliet
8cddb75c2b
Check for local IPs nested in IPv6 as well
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 09:42:32 +00:00
Côme Chilliet
1d0ddcfca1
Refactor local IP if and set strict to true for in_array
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 09:42:32 +00:00
Côme Chilliet
7ab50248dc
Improve local IP detection
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 09:42:32 +00:00
Côme Chilliet
76108a7adb
Sync 3rdparty with stable24, bumps sabre/dav to 4.4.0
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 10:48:07 +02:00
Joas Schilling
da14fde621
Reset user status based on message ID only
...
Since some statuses (call) can occure with different status
(away and dnd) we need to reset only based on the message id.
But as it can not be set by the user this is still save and okay.
Signed-off-by: Joas Schilling <coding@schilljs.com>
2022-07-26 08:16:17 +00:00
Joas Schilling
1749771ce3
Merge pull request #33343 from nextcloud/backport/33129/stable24
...
[stable24] Fix reading blob data as resource
2022-07-26 09:43:54 +02:00
Nextcloud bot
4fbb53e85e
[tx-robot] updated from transifex
...
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2022-07-26 02:27:00 +00:00
Thomas Citharel
618bbb313c
Fix reading blob data as resource
...
PostgreSQL returns data as resource when using IQueryBuilder::PARAM_LOB
(which is used for QBMapper).
Previously we just converted this resource using settype, which produced
things like "Resource id #14 " instead of the actual resource data.
Now we read the stream correctly if the returned data is a resource
See context at #22472
Fixes #22439
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-07-25 15:59:36 +00:00
Vincent Petry
a2166864d4
Merge pull request #33326 from nextcloud/backport/33308/stable24
...
[stable24] always triger setup of builtin storage wrappers
2022-07-25 17:04:19 +02:00
Nextcloud bot
d2cd3adfea
[tx-robot] updated from transifex
...
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2022-07-25 02:27:19 +00:00
Nextcloud bot
5cc782f102
[tx-robot] updated from transifex
...
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2022-07-24 02:27:53 +00:00
Nextcloud bot
7ada3bc39a
[tx-robot] updated from transifex
...
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2022-07-23 02:26:27 +00:00
blizzz
22822a836d
Merge pull request #33252 from nextcloud/backport/32963/stable24
...
[stable24] also use nextcloud certificate bundle when downloading from s3
2022-07-22 23:54:41 +02:00
blizzz
f3afffe416
Merge pull request #33178 from nextcloud/backport/33118/stable24
...
[stable24] Fix empty address books being exported
2022-07-22 23:23:50 +02:00