Lukas Reschke 202530f4f3 Soften the cookie check if no cookies are sent ... When no cookies are sent it is not required to perform any check for the strict or lax cookie, it does not provide any significant security advantage. It does however interfer with the Android client which requests thumbnails from the unofficial API at `/index.php/apps/files/api/v1/thumbnail/256/256/{filename}`. This endpoint expects the strict cookie to be existent to not leak the existence of files. The Android client authenticates against this endpoint using Basic Auth and without cookies in some cases at least. This will make these endpoints work again with such cases. To test this issue the following cURL command once without the patch and once with: > curl http://localhost/index.php/apps/files/api/v1/thumbnail/256/256/welcome.txt -u admin -v Without the patch the request is redirected (which the client does not obey) and with the patch the preview is returned.		2016-06-15 11:50:26 +02:00
..
activity	Allow the activity app to set the current user when sending emails	2016-03-29 09:12:12 +02:00
app	Update author information	2016-03-01 17:25:15 +01:00
appframework	Remove Scrutinizer Auto Fixer	2016-03-01 17:48:23 +01:00
authentication	Happy new year!	2016-01-12 15:02:18 +01:00
backgroundjob	Deprecate the method and warn against using it	2016-01-28 15:40:23 +01:00
capabilities	Happy new year!	2016-01-12 15:02:18 +01:00
command	Happy new year!	2016-01-12 15:02:18 +01:00
comments	Update author information	2016-03-01 17:25:15 +01:00
console	Dispatch an event when a console command is run	2016-02-05 12:24:54 +01:00
contacts	Happy new year!	2016-01-12 15:02:18 +01:00
db/querybuilder	Update author information	2016-03-01 17:25:15 +01:00
diagnostics	Happy new year!	2016-01-12 15:02:18 +01:00
encryption	Introduce isReadyForUser and verify in file transfer ownership - fixes #23786	2016-04-20 20:25:22 +02:00
files	Update author information	2016-03-01 17:25:15 +01:00
http/client	Happy new year!	2016-01-12 15:02:18 +01:00
l10n	Move finding the language files and creating the function out of the object	2016-01-26 14:02:31 +01:00
lock	Happy new year!	2016-01-12 15:02:18 +01:00
mail	Happy new year!	2016-01-12 15:02:18 +01:00
notification	Adjust the since on the interface	2016-01-22 10:51:36 +01:00
preview	Happy new year!	2016-01-12 15:02:18 +01:00
route	Happy new year!	2016-01-12 15:02:18 +01:00
search	Update author information	2016-03-01 17:25:15 +01:00
security	Update author information	2016-03-01 17:25:15 +01:00
share	Add config to sharemanager	2016-03-22 12:37:08 +01:00
systemtag	Allow defining a limit and offset for getObjectIdsForTags	2016-02-23 09:04:15 +01:00
api.php	Happy new year!	2016-01-12 15:02:18 +01:00
app.php	Properly handle return values of OC_App::getAppInfo()	2016-04-01 09:16:47 +02:00
autoloadnotallowedexception.php	Happy new year!	2016-01-12 15:02:18 +01:00
backgroundjob.php	Remove Scrutinizer Auto Fixer	2016-03-01 17:48:23 +01:00
config.php	Happy new year!	2016-01-12 15:02:18 +01:00
constants.php	Update author information	2016-03-01 17:25:15 +01:00
contacts.php	Happy new year!	2016-01-12 15:02:18 +01:00
db.php	Happy new year!	2016-01-12 15:02:18 +01:00
defaults.php	Happy new year!	2016-01-12 15:02:18 +01:00
files.php	Happy new year!	2016-01-12 15:02:18 +01:00
groupinterface.php	Update author information	2016-03-01 17:25:15 +01:00
iaddressbook.php	Happy new year!	2016-01-12 15:02:18 +01:00
iappconfig.php	Remove Scrutinizer Auto Fixer	2016-03-01 17:48:23 +01:00
iavatar.php	Update author information	2016-03-01 17:25:15 +01:00
iavatarmanager.php	Update author information	2016-03-01 17:25:15 +01:00
icache.php	Happy new year!	2016-01-12 15:02:18 +01:00
icachefactory.php	Happy new year!	2016-01-12 15:02:18 +01:00
icertificate.php	Happy new year!	2016-01-12 15:02:18 +01:00
icertificatemanager.php	Merge pull request #21653 from owncloud/update-license-headers-2016	2016-01-13 08:29:42 +01:00
iconfig.php	Happy new year!	2016-01-12 15:02:18 +01:00
icontainer.php	Happy new year!	2016-01-12 15:02:18 +01:00
idatetimeformatter.php	Happy new year!	2016-01-12 15:02:18 +01:00
idatetimezone.php	Happy new year!	2016-01-12 15:02:18 +01:00
idb.php	Happy new year!	2016-01-12 15:02:18 +01:00
idbconnection.php	Update author information	2016-03-01 17:25:15 +01:00
ieventsource.php	Happy new year!	2016-01-12 15:02:18 +01:00
igroup.php	Happy new year!	2016-01-12 15:02:18 +01:00
igroupmanager.php	Update author information	2016-03-01 17:25:15 +01:00
ihelper.php	Happy new year!	2016-01-12 15:02:18 +01:00
iimage.php	Happy new year!	2016-01-12 15:02:18 +01:00
il10n.php	Happy new year!	2016-01-12 15:02:18 +01:00
ilogger.php	Update author information	2016-03-01 17:25:15 +01:00
image.php	Happy new year!	2016-01-12 15:02:18 +01:00
imemcache.php	Happy new year!	2016-01-12 15:02:18 +01:00
imemcachettl.php	Happy new year!	2016-01-12 15:02:18 +01:00
inavigationmanager.php	Happy new year!	2016-01-12 15:02:18 +01:00
ipreview.php	Happy new year!	2016-01-12 15:02:18 +01:00
irequest.php	Soften the cookie check if no cookies are sent	2016-06-15 11:50:26 +02:00
isearch.php	Happy new year!	2016-01-12 15:02:18 +01:00
iservercontainer.php	Add public API to give developers the possibility to adjust the global CSP defaults	2016-01-28 18:36:46 +01:00
isession.php	Happy new year!	2016-01-12 15:02:18 +01:00
itagmanager.php	Happy new year!	2016-01-12 15:02:18 +01:00
itags.php	Happy new year!	2016-01-12 15:02:18 +01:00
itempmanager.php	Happy new year!	2016-01-12 15:02:18 +01:00
iurlgenerator.php	Happy new year!	2016-01-12 15:02:18 +01:00
iuser.php	Update author information	2016-03-01 17:25:15 +01:00
iuserbackend.php	Happy new year!	2016-01-12 15:02:18 +01:00
iusermanager.php	Prevent null to be passed into the closure of callForAllUsers	2016-04-07 14:11:48 +02:00
iusersession.php	Happy new year!	2016-01-12 15:02:18 +01:00
json.php	Happy new year!	2016-01-12 15:02:18 +01:00
preconditionnotmetexception.php	Happy new year!	2016-01-12 15:02:18 +01:00
response.php	Happy new year!	2016-01-12 15:02:18 +01:00
sabrepluginevent.php	Update author information	2016-03-01 17:25:15 +01:00
sabrepluginexception.php	Happy new year!	2016-01-12 15:02:18 +01:00
share.php	Happy new year!	2016-01-12 15:02:18 +01:00
share_backend.php	Happy new year!	2016-01-12 15:02:18 +01:00
share_backend_collection.php	Happy new year!	2016-01-12 15:02:18 +01:00
share_backend_file_dependent.php	Happy new year!	2016-01-12 15:02:18 +01:00
template.php	Remove OC_Helper::imagePath and use the proper public interface	2016-01-24 18:04:20 +01:00
user.php	Happy new year!	2016-01-12 15:02:18 +01:00
userinterface.php	Update author information	2016-03-01 17:25:15 +01:00
util.php	Add Same Site Cookie protection	2016-06-10 17:15:43 +02:00