Commit graph

60872 commits

Author SHA1 Message Date
Joas Schilling
bed25bbc59
Merge pull request #42194 from nextcloud/automated/noid/stable22-update-ca-cert-bundle
[stable22] fix(security): Update CA certificate bundle
2023-12-14 06:53:02 +01:00
nextcloud-command
729e37acc2 fix(security): Update CA certificate bundle
Signed-off-by: GitHub <noreply@github.com>
2023-12-13 02:17:44 +00:00
Joas Schilling
9bd61b27ab
Merge pull request #41129 from nextcloud/backport/41123/stable22
[stable22] fix(external): Get storage before update it
2023-10-26 09:02:36 +02:00
Joas Schilling
3f44d4a2a9
fix(external): Get storage before update it
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-10-26 06:59:50 +02:00
Andy Scherzinger
ec9e63c372
Merge pull request #40319 from nextcloud/backport/40292/stable22
[stable22] fix(CalDAV): check birthday calendar owner
2023-09-08 09:27:51 +02:00
Arthur Schiwon
2d9ba52ccb
Merge pull request #40308 from nextcloud/backport/stable22/40293
[stable22] fix(ratelimit): Only use memory cache backend for redis
2023-09-07 09:16:26 +02:00
Anna Larch
99c9ef3a42 fix(CalDAV): check birthday calendar owner
Signed-off-by: Anna Larch <anna@nextcloud.com>
2023-09-07 08:45:23 +02:00
Joas Schilling
7ae9eac6ac fix(ratelimit): Only use memory cache backend for redis
Signed-off-by: Anna Larch <anna@nextcloud.com>
2023-09-06 18:55:16 +02:00
Arthur Schiwon
892952ff20
Merge pull request #40265 from nextcloud/backport/40234/stable22
[stable22] enh: skip processing for empty response
2023-09-05 19:34:28 +02:00
Daniel Kesselberg
c4286730fa
enh: skip processing for empty response
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2023-09-05 12:22:58 +02:00
John Molakvoæ
9878062862
Merge pull request #40009 from nextcloud/automated/noid/stable22-update-ca-cert-bundle 2023-08-23 08:09:26 +02:00
nextcloud-command
dae77f3ac1 fix(security): Update CA certificate bundle
Signed-off-by: GitHub <noreply@github.com>
2023-08-23 02:10:03 +00:00
Arthur Schiwon
2e8bbb770c
Merge pull request #39496 from nextcloud/backport/39490/stable22
[stable22] fix(apps): Fix loading info.xml file
2023-07-20 13:38:25 +02:00
Joas Schilling
58c20cf54e
fix(apps): Fix loading info.xml file
Ref: https://bugs.php.net/bug.php?id=62577

Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-07-20 10:56:23 +02:00
Joas Schilling
ad8e648ed2
Merge pull request #39422 from nextcloud/backport/39416/stable22
[stable22] fix(core): Add password confirmation requirement for getapppassword
2023-07-17 17:12:19 +02:00
Joas Schilling
9fd8a02555
fix(core): Add password confirmation requirement for getapppassword
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-07-17 12:18:17 +02:00
Andy Scherzinger
144461bbeb
Merge pull request #39361 from nextcloud/backport/39323/39323-stable22
[stable22] getStorage before remove
2023-07-13 21:32:16 +02:00
Maxence Lange
d43727a429 getStorage before remove
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
2023-07-13 11:04:41 -01:00
Andy Scherzinger
fb91161482
Merge pull request #39349 from nextcloud/ci/sign-drone-stable22
[stable22] chore(CI): Sign .drone.yml file
2023-07-13 12:49:26 +02:00
Joas Schilling
ad696f672b
chore(CI): Sign .drone.yml file
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-07-13 11:55:07 +02:00
Joas Schilling
c0074db19b
Merge pull request #39308 from nextcloud/backport/38773/stable22
[stable22] Add bruteforce protection in OauthApiController
2023-07-13 09:11:19 +02:00
Julien Veyssier
ae83c0ba8c
add bruteforce protection in OauthApiController
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2023-07-11 14:16:33 +02:00
Joas Schilling
149148e54a
Merge pull request #39256 from nextcloud/backport/38046/stable22
[stable22] fix(dav): Abort requests with 429 instead of waiting
2023-07-10 14:39:21 +02:00
Joas Schilling
da708a589d
fix(dav): Abort requests with 429 instead of waiting
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-07-10 07:03:04 +02:00
Daniel Kesselberg
43532a4d79
chore(tests): add tests for handleLoginFailed
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2023-07-10 07:01:06 +02:00
Daniel Kesselberg
6ca2973b17
chore: use local variable for remote address
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2023-07-10 06:58:55 +02:00
Arthur Schiwon
7400d502bd
Merge pull request #38913 from nextcloud/backport/38584/stable22
[stable22] Increase from 100000 to 600000 iterations for hash_pbkdf2
2023-06-22 12:37:15 +02:00
Côme Chilliet
f5b2945b9f Adapt encryption test to change in generateHeader
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2023-06-20 16:23:19 +00:00
Côme Chilliet
dda2bec0bc Increase from 100000 to 600000 iterations for hash_pbkdf2
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2023-06-20 16:23:17 +00:00
Arthur Schiwon
243d545610
Merge pull request #38896 from nextcloud/obj-store-copy-list-source-cache-22
[stable22] use source cache when listing folder during recursive copy
2023-06-19 21:18:12 +02:00
Robin Appelman
7f4de89b5e
use source cache when listing folder during recursive copy
Signed-off-by: Robin Appelman <robin@icewind.nl>
2023-06-19 12:29:18 +02:00
John Molakvoæ
1ca50d1a8a
Merge pull request #38536 from nextcloud/automated/noid/stable22-update-ca-cert-bundle 2023-06-09 09:03:26 +02:00
nextcloud-command
3499c0d367 Update CA certificate bundle
Signed-off-by: GitHub <noreply@github.com>
2023-05-31 02:33:56 +00:00
Arthur Schiwon
86bd13b2c8
Merge pull request #38464 from nextcloud/fix/read-only-system-addres-book-acls-stable22
[stable22] fix(carddav): Mark system address book as read-only
2023-05-25 16:01:41 +02:00
Joas Schilling
2d108e6b0c
Merge pull request #38279 from nextcloud/backport/38274/stable22
[stable22] fix(middleware): Also abort the request when reaching max delay in af…
2023-05-16 11:34:08 +02:00
Joas Schilling
439a32428f
Merge pull request #38272 from nextcloud/backport/38267/stable22
[stable22] fix(lostpassword): Also rate limit the setPassword endpoint
2023-05-16 06:36:50 +02:00
Robin Appelman
86e4f32c29
Merge pull request #38285 from nextcloud/session-auth-check-username-22
[22] check the username when doing external storage session auth
2023-05-15 23:49:40 +02:00
Robin Appelman
9d81b0b874
check the username when doing external storage session auth
Signed-off-by: Robin Appelman <robin@icewind.nl>
2023-05-15 17:07:33 +02:00
Joas Schilling
56596678e0
fix(middleware): Also abort the request when reaching max delay in afterController
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-05-15 16:29:57 +02:00
Joas Schilling
e3f28678c2
fix(tests): Adjust unit tests
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-05-15 16:13:24 +02:00
Joas Schilling
bd5c66c679
fix(lostpassword): Also rate limit the setPassword endpoint
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-05-15 16:05:46 +02:00
Christoph Wurst
1fb687dbe1
fix(carddav): Mark system address book as read-only
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2023-05-15 10:55:19 +02:00
Arthur Schiwon
a50cfd6f0e
Merge pull request #37999 from nextcloud/backport/37909/stable22
[stable22] Update crl after revoke shifts.csr
2023-05-04 10:56:01 +02:00
Vitor Mattos
0a52f1ed5d Update crl after revoke shifts.csr
Signed-off-by: Vitor Mattos <vitor@php.rio>
2023-05-01 09:08:25 -03:00
Joas Schilling
2e15ef1ddb
Merge pull request #37841 from nextcloud/bump/guzzle-psr7/stable22
[stable22] sec(deps): Update guzzlehttp/psr7
2023-04-27 09:37:22 +02:00
Joas Schilling
b9c85266b7
sec(deps): Update guzzlehttp/psr7
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-04-26 15:53:51 +02:00
Joas Schilling
cea457b1b6
Merge pull request #37556 from nextcloud/backport/37542/stable22
[stable22] feat(security): Allow to opt-out of ratelimit protection, e.g. for te…
2023-04-03 22:11:50 +02:00
Joas Schilling
f09e4f69d0
fix(backport): Add missing sample config
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-04-03 15:51:29 +02:00
Joas Schilling
cdc27e25d2 feat(security): Allow to opt-out of ratelimit protection, e.g. for testing on CI
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-04-03 13:10:39 +00:00
Joas Schilling
5e3324228e
Merge pull request #37258 from nextcloud/backport/37252/stable22
[stable22] fix(workflow): Check tag attribute
2023-03-16 15:08:03 +01:00