Christoph Wurst
3534f3dd7a
fix(session): Do not update authtoken last_check for passwordless
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2024-05-29 13:23:05 +02:00
Joas Schilling
81805039d1
fix: Mark more configs as sensitive
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-05-28 17:57:50 -04:00
Côme Chilliet
5fc46cd516
fix: Also search in email field for disabled users
...
To match what is done for Database backend for enabled users
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2024-05-27 15:03:07 +02:00
Côme Chilliet
896c539705
feat: Add back searching in disabled user list
...
When disabled users where moved to their own endpoint we overlooked
search, so adding it back.
The search is done case-insensitive in uid and display name.
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2024-05-27 15:03:03 +02:00
Joas Schilling
b042aacd59
Merge pull request #45372 from nextcloud/backport/45236/stable28
...
[stable28] Hide 'updater.server.url' As It May Contain Enterprise Key
2024-05-16 16:51:36 +02:00
Joas Schilling
55dd8087c4
Merge pull request #45339 from nextcloud/backport/44710/stable28
...
[stable28] fix(preview): check mime type before processing with Imagick
2024-05-16 16:42:05 +02:00
derschiw
a70d14aa3a
fix(SystemConfig.php): Add 'updater.server.url' to Private Variables
...
Add "updater.server.url" to the privacy redacted values, as it may contain the enterprise key.
Signed-off-by: derschiw <37687705+derschiw@users.noreply.github.com>
2024-05-16 14:31:10 +00:00
Joas Schilling
9551fe5255
Merge pull request #45342 from nextcloud/backport/45340/stable28
...
[stable28] fix: Extend SVG reference check
2024-05-16 11:18:19 +02:00
Joas Schilling
5b07cfa5db
fix: Extend SVG reference check
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-05-16 10:03:54 +02:00
Varun Patil
312dc5612f
fix(preview): check mime type before processing with Imagick
...
Signed-off-by: Varun Patil <varunpatil@ucla.edu>
2024-05-15 20:16:43 +00:00
Joas Schilling
9379fd9f70
fix: Correctly check result of function
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-05-15 10:40:15 +02:00
Josh
b62901131f
fix(Files): Change how scanner diffs for changed metadata
...
Fixes #43408
Signed-off-by: Josh <josh.t.richards@gmail.com>
2024-05-13 09:06:41 +00:00
Josh
9046cd9c0f
fix(User\Manager): Avoid future collisions with updater/audit logs
...
Avoid future collisions for not yet created updater and audit log files (at least using default names).
Signed-off-by: Josh <josh.t.richards@gmail.com>
2024-05-06 14:31:49 +00:00
Joas Schilling
f09f4ec8db
fix(session): Avoid race condition for cache::get() vs. cache::hasKey()
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-05-06 12:08:41 +02:00
Côme Chilliet
a3456b74be
fix: Remove bogus code from query builder and fix parameter name
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2024-04-30 10:35:50 +00:00
Joas Schilling
0095ce7723
fix(CI): Suppress psalm UndefinedClass
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-04-18 09:32:35 +02:00
Joas Schilling
1dcc48ac4f
fix(files): Also skip cross storage move with access control
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-04-17 14:32:55 +00:00
Florian Klinger
ca655ba100
fix: add check for app_api_system session flag to bypass rate limit
...
Signed-off-by: Florian Klinger <florian.klinger@nextcloud.com>
Signed-off-by: Andrey Borysenko <andrey18106x@gmail.com>
2024-04-17 11:22:05 +02:00
Benjamin Gaussorgues
88859aa41c
Merge pull request #44461 from nextcloud/backport/44394/stable28
2024-04-17 11:19:04 +02:00
Benjamin Gaussorgues
66abfb4322
Merge pull request #44489 from nextcloud/backport/44474/stable28
2024-04-17 11:17:14 +02:00
Benjamin Gaussorgues
2981694fc9
Merge pull request #44446 from nextcloud/backport/43057/stable28
2024-04-17 10:06:14 +02:00
Robin Appelman
4bd5b49077
fix: use proper jailed patch in watcher
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-04-10 01:21:01 +02:00
Christopher Ng
dbb6213c1a
fix: Fix avatar images
...
Signed-off-by: Christopher Ng <chrng8@gmail.com>
2024-04-08 17:09:26 -07:00
Julius Härtl
5ec8f0b075
perf: Avoid updating the folder size if we know the size difference
...
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2024-04-05 12:57:39 +00:00
Varun Patil
d41918f4ab
fix(config): correctness issues in reading
...
Signed-off-by: Varun Patil <varunpatil@ucla.edu>
2024-04-03 08:19:20 -05:00
Ferdinand Thiessen
cee151a14f
fix(JSRecourceLocator): Add missing slash after server root
...
The `OC::$SERVERROOT` is always returned without a trailing slash, so we need to add a slash between server root and apps directory.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-03-29 08:27:46 -04:00
Louis Chemineau
ad2b367dbd
feat(files)): Add retry logic to cover deadlock situations when moving many files
...
Signed-off-by: Louis Chemineau <louis@chmn.me>
2024-03-28 13:01:38 +00:00
Richard Steinmetz
e55f08372f
fix(preview): webp preview format
...
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
2024-03-26 14:18:52 +00:00
Ferdinand Thiessen
2cabc708fb
fix(DB): Sanitize host parameter for postgres databases when IPv6 address is passed
...
Doctrine is using `pg_connect` with the `host` parameter, this does not allow IPv6 addresses in URI notation.
So we need to extract the IP address and pass it directly
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-03-25 23:55:04 +01:00
Stephan Orbaugh
08444f45f1
Merge pull request #44320 from nextcloud/backport/39990/stable28
...
[stable28] add some recrusive detection/prevention
2024-03-25 15:27:27 +01:00
Benjamin Gaussorgues
db00cd54ba
feat(perf): add cache for authtoken lookup
...
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2024-03-25 08:37:00 +00:00
Robin Appelman
e2eb5eec3c
fix: log error when default getWrapperStorage would return null
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-03-22 19:46:00 +00:00
Robin Appelman
7d98e83e3f
fix: add some recrusive detection/prevention
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-03-22 17:17:57 +01:00
John Molakvoæ
191b977fb9
Merge pull request #44285 from nextcloud/backport/44279/stable28
2024-03-21 10:21:22 +01:00
Maxence Lange
426aecfc42
fix(share): use share owner to confirm reshare
...
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
2024-03-20 11:09:50 +00:00
Christoph Wurst
3eb8082f0c
fix(config): Make sure user keys are strings
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2024-03-19 17:30:47 +00:00
John Molakvoæ
6209b6e304
Merge pull request #44053 from nextcloud/backport/43086/stable28
2024-03-19 09:14:58 +01:00
Robin Appelman
e286622d0b
fix: ensure nested mount points are handled in the correct order
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-03-18 18:03:24 +00:00
Klaus
354387b135
fix xml ocs response for serializable objects
...
Signed-off-by: sualko <klaus@jsxc.org>
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2024-03-18 01:13:19 +00:00
John Molakvoæ
92e43540ba
Merge pull request #44208 from nextcloud/backport/44203/stable28
2024-03-16 13:20:25 +01:00
John Molakvoæ
57cb18fa37
Merge pull request #44080 from nextcloud/backport/43992/stable28
2024-03-16 13:13:11 +01:00
Benjamin Gaussorgues
e13e8c1349
fix: avoid scanning a non existing directory
...
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2024-03-14 18:47:14 +00:00
hopleus
c834200b48
Refactoring getName function
...
Signed-off-by: hopleus <hopleus@gmail.com>
2024-03-14 14:54:58 +00:00
hopleus
abb30aae11
Fixes for getting the file name in the cases when the file name key is received, but it is empty
...
Signed-off-by: hopleus <hopleus@gmail.com>
2024-03-14 14:54:58 +00:00
Julius Härtl
3103a85c18
fix: Add edge as supported user agent for CSPv3 nonces
...
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2024-03-11 10:08:56 +01:00
Julius Härtl
b26fbc3c84
fix: Adjust user agent pattern for Edge
...
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2024-03-11 10:08:56 +01:00
Julius Härtl
0d0855b596
fix: Avoid clear cache with prefix
...
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2024-03-08 08:51:08 +00:00
Robin Appelman
33699b29d9
fix: disable the internal s3sdk multi part copy logic
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-03-07 09:15:28 +00:00
Ferdinand Thiessen
d0d9b39843
fix(JSResourceLocator): Consider configured app roots for files
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-03-07 08:03:09 +00:00
Julius Härtl
a258abfe59
fix: Fetch custom app store url without internet connection
...
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2024-03-04 20:17:01 +00:00