Skip to content
Snippets Groups Projects
  1. Jul 25, 2015
  2. Jul 13, 2015
  3. Jul 10, 2015
  4. Jul 08, 2015
  5. Jul 06, 2015
  6. Jun 22, 2015
  7. Jun 16, 2015
  8. Apr 15, 2015
  9. Apr 09, 2015
  10. Mar 27, 2015
  11. Mar 26, 2015
  12. Mar 25, 2015
  13. Mar 24, 2015
  14. Mar 23, 2015
  15. Mar 02, 2015
    • Lukas Reschke's avatar
      Let users configure security headers in their Webserver · bbd5f284
      Lukas Reschke authored
      Doing this in the PHP code is not the right approach for multiple reasons:
      
      1. A bug in the PHP code prevents them from being added to the response.
      2. They are only added when something is served via PHP and not in other cases (that makes for example the newest IE UXSS which is not yet patched by Microsoft exploitable on ownCloud)
      3. Some headers such as the Strict-Transport-Security might require custom modifications by administrators. This was not possible before and lead to buggy situations.
      
      This pull request moves those headers out of the PHP code and adds a security check to the admin settings performed via JS.
      bbd5f284
  16. Feb 20, 2015
  17. Feb 17, 2015
  18. Feb 11, 2015
  19. Jan 29, 2015
  20. Jan 14, 2015
  21. Jan 08, 2015
    • Morris Jobke's avatar
      Add timeout for notifications · 8e190438
      Morris Jobke authored
      * options for timeout in seconds and if it contains HTML
      * if timeout is 0 it will show the message permanently
      * removes the notification after a given (default: 5 seconds) timeframe
      * based on work by @brantje
      * provide JS unit tests for notifications
      8e190438
  22. Jan 02, 2015
  23. Dec 16, 2014
  24. Dec 15, 2014
  25. Dec 10, 2014
  26. Dec 01, 2014
  27. Nov 18, 2014
  28. Oct 31, 2014
  29. Oct 29, 2014
    • Vincent Petry's avatar
      Include core translations · d71cd680
      Vincent Petry authored
      Moved search result type translations to search.js
      
      Load JS translations earlier
      
      Translations need to be loaded earlier to make sure that some JS files
      like search.js get access to translations at this time.
      
      This requires the template initialization to be moved to after session
      initialization, because only after the session we have access to the
      current language.
      d71cd680
Loading