nextcloud/settings/js
Lukas Reschke becde58952
Add sudo mode to enabling and disabling apps
Otherwise an administrator could bypass sudo mode by installing an app that allows RCE by design. I've by intention excluded the update endpoint from the requirement because updating apps should be as unintruisive as possible.

Not the cleanest approach by adding this to the AJAX endpoints instead of requiring a controller but for 11 this felt safer for me. We can clean this up together later then. (also the other AJAX endpoints in this folder do have the same logic)

Ref https://github.com/nextcloud/server/issues/2487

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-12-05 15:12:28 +01:00
..
users Fix password change in user management 2016-11-30 13:36:37 +01:00
admin.js Require confirmation when changing the email settings 2016-11-18 12:10:50 +01:00
apps.js Add sudo mode to enabling and disabling apps 2016-12-05 15:12:28 +01:00
authtoken.js Use OC.Backbone instead of Backbone directly in authtoken JS code 2016-06-23 18:26:01 +02:00
authtoken_collection.js sort tokens 2016-07-20 15:59:00 +02:00
authtoken_view.js Fix Regex for iPhone and add iPad 2016-11-28 18:42:49 +01:00
certificates.js Use tooltip for ssl certs table 2016-07-13 10:00:02 +02:00
federationscopemenu.js Make Christoph happier 2016-11-21 23:21:53 +01:00
federationsettingsview.js Allow emtpy values on personal page and fix saving checkmark position 2016-12-05 10:48:52 +01:00
log.js Add user ID to log entries in admin page 2016-06-10 15:38:21 +02:00
personal.js remove dead js code from personal settings 2016-12-05 10:50:04 +01:00
settings.js Make it possible to exclude admin groups from groups select2 2016-05-20 17:56:02 +02:00
usersettings.js use PUT to update user settings 2016-11-21 11:29:38 +01:00