upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-03-03 05:51:07 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 10
nextcloud/core
History
Christoph Wurst 197a2ea1f9 Fix login loop if login CSRF fails and user is not logged in 
If CSRF fails but the user is logged in that they probably logged in in
another tab. This is fine. We can just redirect.
If CSRF fails and the user is also not logged in then something is
fishy. E.g. because Nextcloud contantly regenrates the session and the
CSRF token and the user is stuck in an endless login loop.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2023-01-18 11:04:59 +00:00
..
ajax Flag repair errors as error level in eventSource->send 2022-08-25 18:32:20 +02:00
BackgroundJobs also use updatedir for cleanup of backups 2022-10-01 17:29:44 +00:00
Command fix repairing non user shares when repairing all shares 2022-11-08 18:20:08 +00:00
Controller Fix login loop if login CSRF fails and user is not logged in 2023-01-18 11:04:59 +00:00
css Fix user status icon in avatar menu 2023-01-04 13:37:18 +01:00
Data Update php licenses 2021-06-04 22:02:41 +02:00
Db Profile backend 2021-10-19 04:59:35 +00:00
doc changed to nextcloud 2016-06-22 08:20:23 +02:00
Events Add password reset typed events 2022-06-10 16:41:41 +02:00
Exception Update php licenses 2021-06-04 22:02:41 +02:00
fonts Include additional scripts in Noto fonts 2021-03-01 19:15:01 +01:00
img Add missing viewbox to SVGs 2022-09-20 10:21:57 +02:00
js Deprecate PHP7.4 2022-11-14 19:41:37 +00:00
l10n Fix(l10n): 🔠 Update translations from Transifex 2023-01-18 02:25:34 +00:00
Middleware Enable strict types for the 2FA middleware 2021-12-16 13:58:25 +01:00
Migrations Fix migration parameter handling 2022-10-13 18:01:43 +02:00
Notification update notifications for one-click instances 2022-10-24 18:01:55 +00:00
Service Update core to PHP 7.4 standard 2022-05-20 22:18:06 +02:00
skeleton ownCloud -> Nextcloud 2016-07-28 15:47:04 +02:00
src Remove js navigation on alternative login click 2023-01-10 23:59:46 +00:00
templates Add alt to the logo, adapt css for logo 2022-12-22 08:26:53 +01:00
vendor Remove core.js 2019-01-09 15:02:00 +01:00
.l10nignore Add core/js/dist/ to l10nignore 2019-06-13 13:55:22 +02:00
Application.php DB mounts table: Add index for mount_provider_class 2022-08-01 14:27:34 +02:00
register_command.php move share owner repair to occ command 2022-11-08 18:20:07 +00:00
routes.php Add endpoint to fetch a cachable reference data 2022-09-27 09:58:13 +00:00
shipped.json set theming app to alwaysEnabled 2022-10-18 08:21:56 +00:00
strings.php core: add more strict_types 2021-04-26 12:44:37 +02:00