upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-06-12 02:00:51 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 33
69704 commits 1035 branches 1221 tags 8.3 GiB
Commit graph

69704 commits

This branch
This branch
All branches
Author SHA1 Message Date
Ferdinand Thiessen
d00b9cd2fe fix: Resolve some psalm issues 
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
 2023-09-20 20:22:36 +02:00
Ferdinand Thiessen
bcfaa850f3 chore: Compile assets 
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
 2023-09-20 16:06:28 +02:00
Ferdinand Thiessen
33ae58e221 feat: Implement settings frontend for allowed CORS domains 
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
 2023-09-20 16:06:24 +02:00
Ferdinand Thiessen
e608e5d145 fix: Make CORS handling admin configurable and fix tests 
Also make sure to only return allowed methods for DAV responses

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
 2023-09-20 16:06:19 +02:00
noveens
0cb950e4db Removed beforeController Logic 
I removed the beforeController logic here due to the change of handling CORS since PR 28457[1]

According to previous implementation, CORS was only allowed with methods that had @PublicPage notation for preventing CSRF attacks.
But in the latest PR by me, the current implementations is as follows:

    * maintain a white-list of domains for whom CORS is enabled
    * This list can be viewed and edited under settings -> personal -> security

This implementation removes the need for `@PublicPage`[2].

[1] https://github.com/owncloud/core/pull/28457
[2] https://github.com/owncloud/core/pull/28864/
 2023-09-20 15:17:41 +02:00
noveens
c1fa6401a3 Enabled CORS on webdav and ocs 
* Exclude DAV CORS handling when no Origin specified
  This will exclude non-browser clients from CORS handling.
  Fixes some clients like davfs which break when CORS is enabled.
* fix: CORS on WebDAV is not working
  WebDAV is not working at all when used by on browser Javascript because the CORS headers
  are only present in the OPTION request, but not in the subsequent WebDAV methods.
  * This behavior is caused by a erroneous json_decode call while retriving the user's domains whitelist.
    It return an object, so the is_array always fails and no header are sent.
* Add Access-Control-Expose-Headers - to allow clients to access certain headers
* Adding many headers as allowed headers + add capability to read additional allowed headers from config.php
 2023-09-20 14:59:59 +02:00
John Molakvoæ
4ddbc55d5d
Merge pull request #40517 from nextcloud/feat/sharing-status 2023-09-20 14:55:18 +02:00
John Molakvoæ (skjnldsv)
fac5197486
feat(files): add files_sharing indicator 
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
 2023-09-20 13:58:31 +02:00
Kate
6714e51b0c
Merge pull request #39626 from nextcloud/fix/remove-litmus-locks-tests 
Remove litmus locks tests
 2023-09-20 11:32:21 +02:00
Louis
d5fc95b661
Merge pull request #40213 from nextcloud/dependabot/npm_and_yarn/nextcloud/browserslist-config-3.0.0 
chore(deps): Bump @nextcloud/browserslist-config from 2.3.0 to 3.0.0
 2023-09-20 10:38:17 +02:00
Côme Chilliet
0cfdf6f6ad
Merge pull request #40504 from nextcloud/fix/remove-ilogger-uses-in-user_ldap 
Remove deprectated ILogger uses from user_ldap application
 2023-09-20 10:26:11 +02:00
Nextcloud bot
fecae94229
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-09-20 00:27:30 +00:00
Richard Steinmetz
7cf8421360
Merge pull request #40481 from nextcloud/fix/guest-pages-contentinfo 
fix: content info footer on guest pages
 2023-09-19 23:54:03 +02:00
Richard Steinmetz
9a5a392bf9
fix: content info footer on guest pages 
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
 2023-09-19 21:57:01 +02:00
nextcloud-command
6792724657 chore(assets): Recompile assets 
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
 2023-09-19 19:24:20 +00:00
Ferdinand Thiessen
ec72121153
Merge pull request #39964 from nextcloud/dependabot/npm_and_yarn/camelcase-8.0.0 
chore(deps): Bump camelcase from 6.3.0 to 8.0.0
 2023-09-19 21:16:49 +02:00
Joas Schilling
2bd0f07e5a
Merge pull request #40488 from nextcloud/bugfix/noid/message-expiration-breaks-pagination 
fix(comments): Use provided offset in best effort when loading comments
 2023-09-19 15:30:57 +02:00
Côme Chilliet
7a59d2ec07
Remove deprectated ILogger uses from user_ldap application 
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
 2023-09-19 15:22:45 +02:00
Ferdinand Thiessen
4c49dda128 fix(systemtags): Add one unittest for to test tags parsing after the dependency was updated 
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
 2023-09-19 14:59:13 +02:00
dependabot[bot]
1099946748 chore(deps): Bump camelcase from 6.3.0 to 8.0.0 
Bumps [camelcase](https://github.com/sindresorhus/camelcase) from 6.3.0 to 8.0.0.
- [Release notes](https://github.com/sindresorhus/camelcase/releases)
- [Commits](https://github.com/sindresorhus/camelcase/compare/v6.3.0...v8.0.0)

---
updated-dependencies:
- dependency-name: camelcase
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-09-19 14:59:13 +02:00
Anna
b6761fbc96
Merge pull request #40423 from nextcloud/enh/proved-db-as-string 2023-09-19 14:06:01 +02:00
Ferdinand Thiessen
1ce7dd4be1
Merge pull request #39720 from nextcloud/dependabot/composer/build/integration/symfony/event-dispatcher-5.4.26 
chore(deps-dev): Bump symfony/event-dispatcher from 5.4.22 to 5.4.26 in /build/integration
 2023-09-19 13:50:48 +02:00
Ferdinand Thiessen
78c814400e
Merge pull request #40210 from nextcloud/dependabot/npm_and_yarn/cypress/webpack-preprocessor-6.0.0 
chore(deps-dev): Bump @cypress/webpack-preprocessor from 5.17.1 to 6.0.0
 2023-09-19 13:49:07 +02:00
dependabot[bot]
77721b237d
chore(deps): Bump @nextcloud/browserslist-config from 2.3.0 to 3.0.0 
Bumps [@nextcloud/browserslist-config](https://github.com/nextcloud/browserslist-config) from 2.3.0 to 3.0.0.
- [Release notes](https://github.com/nextcloud/browserslist-config/releases)
- [Commits](https://github.com/nextcloud/browserslist-config/compare/v2.3.0...v3.0.0)

---
updated-dependencies:
- dependency-name: "@nextcloud/browserslist-config"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-09-19 11:46:11 +00:00
Ferdinand Thiessen
7f9faa544b
Merge pull request #40355 from nextcloud/dependabot/github_actions/cypress-io/github-action-6.5.0 
chore(deps): Bump cypress-io/github-action from 5.8.3 to 6.5.0
 2023-09-19 13:46:09 +02:00
dependabot[bot]
5b620eb945
Merge pull request #40052 from nextcloud/dependabot/composer/build/integration/phpunit/phpunit-9.6.11 2023-09-19 11:41:48 +00:00
Anna Larch
56419d94f8 enh(db): provide database providers via API 
To avoid leaking internals (OC), wrap the getDatabasePlatform and provide the
associated constants

fixes https://github.com/nextcloud/server/issues/30877

Signed-off-by: Anna Larch <anna@nextcloud.com>
 2023-09-19 11:56:44 +02:00
dependabot[bot]
4caf4ca2fd
chore(deps-dev): Bump phpunit/phpunit in /build/integration 
Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 9.6.10 to 9.6.11.
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/9.6.11/ChangeLog-9.6.md)
- [Commits](https://github.com/sebastianbergmann/phpunit/compare/9.6.10...9.6.11)

---
updated-dependencies:
- dependency-name: phpunit/phpunit
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-09-19 09:39:52 +00:00
Ferdinand Thiessen
8157d97890
Merge pull request #39974 from nextcloud/dependabot/github_actions/actions/setup-node-3.8.1 
chore(deps): Bump actions/setup-node from 3.6.0 to 3.8.1
 2023-09-19 11:39:12 +02:00
Ferdinand Thiessen
ad8811d392
Merge pull request #39972 from nextcloud/dependabot/github_actions/peter-evans/create-pull-request-5 
chore(deps): Bump peter-evans/create-pull-request from 3 to 5
 2023-09-19 11:38:24 +02:00
Ferdinand Thiessen
2a35dd39a1
Merge pull request #40455 from nextcloud/dependabot/composer/build/integration/phpunit/phpunit-9.6.12 
chore(deps-dev): Bump phpunit/phpunit from 9.6.10 to 9.6.12 in /build/integration
 2023-09-19 11:34:56 +02:00
dependabot[bot]
ff6cc481ec
chore(deps-dev): Bump symfony/event-dispatcher in /build/integration 
Bumps [symfony/event-dispatcher](https://github.com/symfony/event-dispatcher) from 5.4.22 to 5.4.26.
- [Release notes](https://github.com/symfony/event-dispatcher/releases)
- [Changelog](https://github.com/symfony/event-dispatcher/blob/6.3/CHANGELOG.md)
- [Commits](https://github.com/symfony/event-dispatcher/compare/v5.4.22...v5.4.26)

---
updated-dependencies:
- dependency-name: symfony/event-dispatcher
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-09-19 09:30:20 +00:00
Côme Chilliet
40852efd2c
Merge pull request #40470 from nextcloud/fix/bump-phpseclib/phpseclib-to-2.0.45-in-master 
Bump phpseclib/phpseclib to 2.0.45 in master
 2023-09-19 11:28:49 +02:00
John Molakvoæ
085568b75c
Merge pull request #40475 from nextcloud/feat/f2v/systemtags 2023-09-19 11:09:43 +02:00
Robin Appelman
cd7c3f0a6f
Merge pull request #39531 from nextcloud/sso-kerberos-fix2 
kerberos sso ci fix
 2023-09-19 10:38:32 +02:00
Simon L
f75891de5d
Merge pull request #40485 from nextcloud/fix/report-test 
fix(dav): fix report tests
 2023-09-19 09:25:21 +02:00
Nextcloud bot
5b9cfedc66
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-09-19 00:23:57 +00:00
John Molakvoæ (skjnldsv)
f8ed23a426 fix(dav): fix report tests 
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
 2023-09-18 22:19:30 +02:00
Andy Scherzinger
6c9cf907cc
Merge pull request #40357 from nextcloud/dependabot/github_actions/actions/checkout-4 
chore(deps): Bump actions/checkout from 3 to 4
 2023-09-18 21:35:01 +02:00
Joas Schilling
4d2217073a
fix(comments): Use provided offset in best effort when loading comments 
When we didn't find the "$lastKnownComment" the whole condition was ignored.
Now we still use the ID as an offset.
This is required as a fall-back for expired messages in Talk
and deleted comments in other apps.

Signed-off-by: Joas Schilling <coding@schilljs.com>
 2023-09-18 20:09:32 +02:00
dependabot[bot]
81fe4a9fe3
chore(deps): Bump actions/checkout from 3 to 4 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...3df4ab11eba7bda6032a0b82a6bb43b11571feac)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-09-18 17:15:30 +00:00
Robin Appelman
cf7344082d
Merge pull request #40183 from nextcloud/sftp-fixes 
SFTP improvements
 2023-09-18 19:14:27 +02:00
Robin Appelman
fc7adff48d use user_saml from git 
Signed-off-by: Robin Appelman <robin@icewind.nl>
 2023-09-18 17:25:39 +02:00
John Molakvoæ
ee9010904d
Merge pull request #40480 from privatemaker/fix/dashboard-icon-apps-dark 2023-09-18 17:24:41 +02:00
Côme Chilliet
a0c9735f1a Update 3rdparty to master commit 
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
 2023-09-18 17:12:48 +02:00
Côme Chilliet
ab6ef3a8ce Bump phpseclib/phpseclib to 2.0.45 in master 
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
 2023-09-18 17:12:48 +02:00
John Molakvoæ (skjnldsv)
ef1abd958c
fix(systemtags): fix capabilities and sidebar + tag visibility 
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
 2023-09-18 16:44:28 +02:00
Robin Appelman
a185edd5d1 kerberos sso ci fixes 
Signed-off-by: Robin Appelman <robin@icewind.nl>
 2023-09-18 16:43:41 +02:00
Robin Appelman
d42d809170 sftp psalm fixes 
Signed-off-by: Robin Appelman <robin@icewind.nl>
 2023-09-18 16:12:03 +02:00
John Molakvoæ (skjnldsv)
fb30aa0902
fix(files): allow downloading folders within user root folders only 
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
 2023-09-18 15:38:02 +02:00