Commit graph

62811 commits

Author SHA1 Message Date
Vincent Petry
1eca72d417
Fix share controller to accept share attributes alone
Signed-off-by: Vincent Petry <vincent@nextcloud.com>
2022-08-03 13:24:18 +02:00
Vincent Petry
f1ab964819
Add share attributes + prevent download permission
Makes it possible to store download permission

Signed-off-by: Vincent Petry <vincent@nextcloud.com>
2022-08-03 13:24:13 +02:00
blizzz
6088f720bd
Merge pull request #33439 from nextcloud/backport/32958/stable24
[stable24] Fix file public link permissions if public upload is not enabled
2022-08-03 11:27:10 +02:00
Vincent Petry
3a3a52de83
Merge pull request #33407 from nextcloud/backport/stable24/one-time-password
[stable24] Handle one time and large passwords
2022-08-03 09:07:54 +02:00
dependabot[bot]
313e336d22
Merge pull request #33438 from nextcloud/dependabot/npm_and_yarn/stable24/clipboard-2.0.11 2022-08-02 18:32:19 +00:00
dependabot[bot]
996cdbf0a7 Bump clipboard from 2.0.10 to 2.0.11
Bumps [clipboard](https://github.com/zenorocha/clipboard.js) from 2.0.10 to 2.0.11.
- [Release notes](https://github.com/zenorocha/clipboard.js/releases)
- [Commits](https://github.com/zenorocha/clipboard.js/compare/v2.0.10...v2.0.11)

---
updated-dependencies:
- dependency-name: clipboard
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2022-08-02 17:51:56 +00:00
Julien Veyssier
008a9f568d fix share manager tests
Signed-off-by: Julien Veyssier <eneiluj@posteo.net>
2022-08-02 14:56:59 +00:00
Julien Veyssier
933bd27ea9 don't reduce file public link permissions if public upload is not enabled
Signed-off-by: Julien Veyssier <eneiluj@posteo.net>
2022-08-02 14:56:59 +00:00
dependabot[bot]
8506e44bd6
Merge pull request #33370 from nextcloud/dependabot/npm_and_yarn/stable24/nextcloud/moment-1.2.1 2022-08-02 14:24:43 +00:00
dependabot[bot]
0d286d99d6
Bump @nextcloud/moment from 1.2.0 to 1.2.1
Bumps [@nextcloud/moment](https://github.com/nextcloud/nextcloud-moment) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/nextcloud/nextcloud-moment/releases)
- [Changelog](https://github.com/nextcloud/nextcloud-moment/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nextcloud/nextcloud-moment/compare/v1.2.0...v1.2.1)

---
updated-dependencies:
- dependency-name: "@nextcloud/moment"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2022-08-02 15:29:58 +02:00
blizzz
039fd75a88
Merge pull request #33353 from nextcloud/backport/33031/stable24
[stable24] Improve local IP detection
2022-08-02 12:36:10 +02:00
Côme Chilliet
38eb0df671
Fix autoloader
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-08-01 15:13:34 +02:00
blizzz
66d4f6744e
Merge pull request #33391 from nextcloud/backport/33280/stable24
[stable24] handle AccessDenied error when checking if external s3 support versions
2022-08-01 15:10:36 +02:00
blizzz
e70ffdf556
Merge pull request #33382 from nextcloud/backport/33378/stable24
[stable24] don't set `null` as a bundle path
2022-08-01 15:09:54 +02:00
Vincent Petry
9070dbd7af
Merge pull request #33096 from nextcloud/dependabot/npm_and_yarn/stable24/handlebars-loader-1.7.2
Bump handlebars-loader from 1.7.1 to 1.7.2
2022-08-01 15:03:11 +02:00
Vincent Petry
a760b3452b
Merge pull request #32840 from nextcloud/dependabot/npm_and_yarn/stable24/vue-router-3.5.4
Bump vue-router from 3.5.3 to 3.5.4
2022-08-01 15:02:28 +02:00
Côme Chilliet
5daf307a0d
Remove call to undefined function, fix typing
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-08-01 12:24:39 +02:00
Côme Chilliet
ead97ba46d
Align copied file with our code style
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-08-01 11:34:28 +02:00
Côme Chilliet
7d069cd30e
Merge pull request #33352 from nextcloud/fix/bump-sabre-dav-to-4.4.0-in-stable24
Bump sabre dav to 4.4.0 in stable24
2022-08-01 11:32:37 +02:00
Côme Chilliet
d3a2fd02c2
Copy IpUtils from Symfony to avoid new dependency on backport
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-08-01 11:30:51 +02:00
Carl Schwan
f4795f6dac
Handle one time and large passwords
For passwords bigger than 250 characters, use a bigger key since the
performance impact is minor (around one second to encrypt the password).

For passwords bigger than 470 characters, give up earlier and throw
exeception recommanding admin to either enable the previously enabled
configuration or use smaller passwords.

This adds an option to disable storing passwords in the database. This
might be desirable when using single use token as passwords or very
large passwords.

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
2022-07-29 16:15:38 +02:00
Matthieu Gallien
7be4691855 handle AccessDenied error when checking if external s3 support versions
Signed-off-by: Matthieu Gallien <matthieu.gallien@nextcloud.com>
2022-07-28 10:27:50 +00:00
dependabot[bot]
1edc51c639 Bump vue-router from 3.5.3 to 3.5.4
Bumps [vue-router](https://github.com/vuejs/router) from 3.5.3 to 3.5.4.
- [Release notes](https://github.com/vuejs/router/releases)
- [Changelog](https://github.com/vuejs/router/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vuejs/router/commits)

---
updated-dependencies:
- dependency-name: vue-router
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2022-07-27 19:48:40 +00:00
Robin Appelman
afdeae2cc2 don't set null as a bundle path
Signed-off-by: Robin Appelman <robin@icewind.nl>
2022-07-27 13:46:34 +00:00
dependabot[bot]
6a3cd32a2d
Merge pull request #33369 from nextcloud/dependabot/npm_and_yarn/stable24/jsdoc-3.6.11 2022-07-27 00:59:48 +00:00
dependabot[bot]
50ea3ae110
Bump jsdoc from 3.6.10 to 3.6.11
Bumps [jsdoc](https://github.com/jsdoc/jsdoc) from 3.6.10 to 3.6.11.
- [Release notes](https://github.com/jsdoc/jsdoc/releases)
- [Changelog](https://github.com/jsdoc/jsdoc/blob/3.6.11/CHANGES.md)
- [Commits](https://github.com/jsdoc/jsdoc/compare/3.6.10...3.6.11)

---
updated-dependencies:
- dependency-name: jsdoc
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-07-26 22:54:37 +00:00
Vincent Petry
b21f79e7df
Merge pull request #33363 from nextcloud/dependabot/npm_and_yarn/stable24/dompurify-2.3.10
Bump dompurify from 2.3.8 to 2.3.10
2022-07-26 23:17:21 +02:00
Vincent Petry
392327b135
Merge pull request #33132 from nextcloud/backport/33090/stable24
[stable24] DAV custom props: catch Exception and rollback transaction in case
2022-07-26 23:11:14 +02:00
Vincent Petry
19a52f4507
Merge pull request #33350 from nextcloud/backport/33315/stable24
[stable24] Reset user status based on message ID only
2022-07-26 22:49:31 +02:00
Anna
5f743c3c1d
Merge pull request #33364 from nextcloud/backport/33341/stable24
[stable24] Don't try to purge objects from the birthday calendar when it doesn't exist
2022-07-26 20:56:34 +02:00
dependabot[bot]
71b106c342 Bump dompurify from 2.3.8 to 2.3.10
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 2.3.8 to 2.3.10.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/2.3.8...2.3.10)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2022-07-26 17:58:24 +00:00
Thomas Citharel
6d81423c35 Don't try to purge objects from the birthday calendar when it doesn't exist
Doesn't matter much as it's been recreated afterwards with (ensureCalendarExists).

Closes #29617

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-07-26 17:26:01 +00:00
blizzz
91c2a60424
Merge pull request #31984 from nextcloud/dependabot/npm_and_yarn/stable24/underscore-1.12.1
Bump underscore from 1.12.0 to 1.12.1
2022-07-26 19:21:38 +02:00
Vincent Petry
b0be67fb74
Fix core tests by stubbing debounce
Signed-off-by: Vincent Petry <vincent@nextcloud.com>
2022-07-26 15:47:12 +02:00
dependabot[bot]
6c81f543b2 Bump underscore from 1.12.0 to 1.12.1
Bumps [underscore](https://github.com/jashkenas/underscore) from 1.12.0 to 1.12.1.
- [Release notes](https://github.com/jashkenas/underscore/releases)
- [Commits](https://github.com/jashkenas/underscore/compare/1.12.0...1.12.1)

---
updated-dependencies:
- dependency-name: underscore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2022-07-26 13:11:29 +00:00
Côme Chilliet
d0ceedf054 Use Symfony IpUtils to check for local IP ranges
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 09:42:33 +00:00
Côme Chilliet
8cddb75c2b Check for local IPs nested in IPv6 as well
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 09:42:32 +00:00
Côme Chilliet
1d0ddcfca1 Refactor local IP if and set strict to true for in_array
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 09:42:32 +00:00
Côme Chilliet
7ab50248dc Improve local IP detection
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 09:42:32 +00:00
Côme Chilliet
76108a7adb
Sync 3rdparty with stable24, bumps sabre/dav to 4.4.0
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 10:48:07 +02:00
Joas Schilling
da14fde621 Reset user status based on message ID only
Since some statuses (call) can occure with different status
(away and dnd) we need to reset only based on the message id.
But as it can not be set by the user this is still save and okay.

Signed-off-by: Joas Schilling <coding@schilljs.com>
2022-07-26 08:16:17 +00:00
Joas Schilling
1749771ce3
Merge pull request #33343 from nextcloud/backport/33129/stable24
[stable24] Fix reading blob data as resource
2022-07-26 09:43:54 +02:00
Nextcloud bot
4fbb53e85e
[tx-robot] updated from transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2022-07-26 02:27:00 +00:00
Thomas Citharel
618bbb313c Fix reading blob data as resource
PostgreSQL returns data as resource when using IQueryBuilder::PARAM_LOB
(which is used for QBMapper).

Previously we just converted this resource using settype, which produced
things like "Resource id #14" instead of the actual resource data.

Now we read the stream correctly if the returned data is a resource

See context at #22472

Fixes #22439

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-07-25 15:59:36 +00:00
Vincent Petry
a2166864d4
Merge pull request #33326 from nextcloud/backport/33308/stable24
[stable24] always triger setup of builtin storage wrappers
2022-07-25 17:04:19 +02:00
Nextcloud bot
d2cd3adfea
[tx-robot] updated from transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2022-07-25 02:27:19 +00:00
Nextcloud bot
5cc782f102
[tx-robot] updated from transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2022-07-24 02:27:53 +00:00
Nextcloud bot
7ada3bc39a
[tx-robot] updated from transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2022-07-23 02:26:27 +00:00
blizzz
22822a836d
Merge pull request #33252 from nextcloud/backport/32963/stable24
[stable24] also use nextcloud certificate bundle when downloading from s3
2022-07-22 23:54:41 +02:00
blizzz
f3afffe416
Merge pull request #33178 from nextcloud/backport/33118/stable24
[stable24] Fix empty address books being exported
2022-07-22 23:23:50 +02:00