-
Notifications
You must be signed in to change notification settings - Fork 2.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[stable10] Handle SSL certificate verifications for others than Let's Encrypt #31858
[stable10] Handle SSL certificate verifications for others than Let's Encrypt #31858
Conversation
Do no longer (wrongly) rewrite URLs like - http://example.net/.well-known/pki-validation/file.txt (Comodo) - http://example.net/.well-known/pki-validation/fileauth.txt (DigiCert, Thawte, GeoTrust) - http://example.net/.well-known/pki-validation/gsdv.txt (GlobalSign) - http://example.net/.well-known/pki-validation/starfield.htm (Starfield, GoDaddy) - http://example.net/.well-known/pki-validation/swisssign-check.txt (SwissSign) for automated SSL certificate verifications. All (common commercial) certificate authorities (CA) except Let's Encrypt (via ACME) seem to use "pki-validation" rather "acme-challenge" for their domain control validation (DCV). Note that this is required inside of ownCloud rather on web server level due to shared web hosting systems, where the customer/user might not be able to do this on web server level (Apache/Nginx configuration changes for the virtual host). Signed-off-by: Robert Scheck <robert@fedoraproject.org>
|
Codecov Report
@@ Coverage Diff @@
## stable10 #31858 +/- ##
==============================================
+ Coverage 62.45% 62.45% +<.01%
Complexity 18585 18585
==============================================
Files 1210 1210
Lines 72773 72773
Branches 1273 1273
==============================================
+ Hits 45451 45454 +3
+ Misses 26942 26939 -3
Partials 380 380
Continue to review full report at Codecov.
|
@PVince81 merge for 10.0.9? or later - your call - THX |
we're already in code freeze, so unless this is critical I'd rather have this go in the release after that |
(sorry for lengthy some 900 lines), # Changelog All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/). ## [Unreleased] ### Added - Added Symfony event for federation to provide apps with federated share receiver id - [#34152](https://github.com/owncloud/core/issues/34152) - Added mime types for sharedlib and executable - [#33893](https://github.com/owncloud/core/issues/33893) - Allow loading JSON files in setups with pretty URLs - [#32835](https://github.com/owncloud/core/issues/32835) - Support global CORS domains for public pages - [#33139](https://github.com/owncloud/core/issues/33139) - New tag scope "static tags", editable but not assignable - [#33420](https://github.com/owncloud/core/issues/33420) [#33864](https://github.com/owncloud/core/issues/33864) [#34098](https://github.com/owncloud/core/issues/34098) - Added "getBucket" method to HomeObjectStore to fix S3 issue - [#33513](https://github.com/owncloud/core/issues/33513) - Pass an additional parameter on the core update - [#33641](https://github.com/owncloud/core/issues/33641) - Added short list argument to occ files_external:list - [#33684](https://github.com/owncloud/core/issues/33684) - Public JS utility function for email validation - [#33699](https://github.com/owncloud/core/issues/33699) - Introduce persistent and explicit locking of file and folders (Webdav locks) - [#33266](https://github.com/owncloud/core/issues/33266) [#33785](https://github.com/owncloud/core/issues/33785) [#33843](https://github.com/owncloud/core/issues/33843) [#33957](https://github.com/owncloud/core/pull/33957) [#33957](https://github.com/owncloud/core/issues/33957) [#34270](https://github.com/owncloud/core/issues/34270) [#34267](https://github.com/owncloud/core/issues/34267) [#34227](https://github.com/owncloud/core/issues/34227) [#34208](https://github.com/owncloud/core/issues/34208) [#34203](https://github.com/owncloud/core/issues/34203) [#34355](https://github.com/owncloud/core/issues/34355) [#34350](https://github.com/owncloud/core/issues/34350) - Add minimal frontend in files app for persistent locks (Webdav locks) - [#33951](https://github.com/owncloud/core/issues/33951) - Federated sharing new spec OCM 1.0-proposal1 - [#33027](https://github.com/owncloud/core/issues/33027) [#34113](https://github.com/owncloud/core/issues/34113) [#34252](https://github.com/owncloud/core/issues/34252) - Add sharing scope to enable addressbook sharing with custom groups - [#33849](https://github.com/owncloud/core/issues/33849) - Add X-Request-ID to header Access-Control-Allow-Headers - [#33926](https://github.com/owncloud/core/issues/33926) ### Changed - Use new DAV endpoint in web UI file list and upload - [#33544](https://github.com/owncloud/core/issues/33544) - Bypass apps max-version check for daily/git release channels - [#33861](https://github.com/owncloud/core/issues/33861) - Changed default link share name to be "Public link" - [#33879](https://github.com/owncloud/core/issues/33879) [#33955](https://github.com/owncloud/core/issues/33955) - Set shipped apps max version to 10 in preparation for Semver switch - [#33496](https://github.com/owncloud/core/issues/33496) - If only the patch level of an app's version changes no migrations will run - [#33218](https://github.com/owncloud/core/issues/33218) [#34138](https://github.com/owncloud/core/issues/34138) - User/group deletion in users page now has a confirmation dialog - [#33626](https://github.com/owncloud/core/issues/33626) - Disable browser autocomplete for password fields - [#32590](https://github.com/owncloud/core/issues/32590) - Minor and patch updates of dependencies as at 20181126 - [#33683](https://github.com/owncloud/core/issues/33683) - Bump @bower_components/browser-update from 2.0.1 to v2.0.2 in /build - [#34290](https://github.com/owncloud/core/issues/34290) - Bump composer/xdebug-handler to 1.3.0 - [#32977](https://github.com/owncloud/core/issues/32977) - Bump cryptiles from 3.1.2 to 3.1.4 in /build - [#33935](https://github.com/owncloud/core/issues/33935) - Bump friendsofphp/php-cs-fixer (v2.13.0 => v2.14.0) - [#33290](https://github.com/owncloud/core/issues/33290) [#34012](https://github.com/owncloud/core/issues/34012) [#34040](https://github.com/owncloud/core/issues/34040) - Bump handlebars from 4.0.11 to 4.0.12 in /build - [#32661](https://github.com/owncloud/core/issues/32661) [#34071](https://github.com/owncloud/core/issues/34071) - Bump hoek from 4.2.0 to 4.2.1 in /build - [#33574](https://github.com/owncloud/core/issues/33574) - Bump jakub-onderka/php-console-highlighter from 0.3.2 to 0.4 - [#32944](https://github.com/owncloud/core/issues/32944) - Bump karma from 3.0.0 to 3.1.3 in /build - [#33256](https://github.com/owncloud/core/issues/33256) [#33343](https://github.com/owncloud/core/issues/33343) [#33737](https://github.com/owncloud/core/issues/33737) - Bump league/flysystem from 1.0.46 to 1.0.48 - [#33199](https://github.com/owncloud/core/issues/33199) - Bump lodash from 4.17.4 to 4.17.11 in /build - [#33754](https://github.com/owncloud/core/issues/33754) - Bump pear/archive_tar from 1.4.3 to 1.4.5 - [#34080](https://github.com/owncloud/core/issues/34080) - Bump phan 0.12.11 - [#34022](https://github.com/owncloud/core/issues/34022) - Bump phpseclib/phpseclib from 2.0.11 to 2.0.13 - [#33433](https://github.com/owncloud/core/issues/33433) [#33922](https://github.com/owncloud/core/issues/33922) - Bump punic 3.1.0 => 3.2.0 - [#33462](https://github.com/owncloud/core/issues/33462) - Bump sabre/dav from 3.2.2 to 3.2.3 - [#33276](https://github.com/owncloud/core/issues/33276) - Bump sinon from 6.2.0 to 7.1.1 - [#32825](https://github.com/owncloud/core/issues/32825) [#33073](https://github.com/owncloud/core/issues/33073) [#33306](https://github.com/owncloud/core/issues/33306) [#33373](https://github.com/owncloud/core/issues/33373) - Bump marked from 0.3.7 to 0.3.19 in /build - [#33576](https://github.com/owncloud/core/issues/33576) - Bump sabre xml 1.5.1 - [#34102](https://github.com/owncloud/core/issues/34102) - Bump squizlabs/php_codesniffer 3.3.2=>3.4.0 - [#33940](https://github.com/owncloud/core/issues/33940) - Bump sshpk from 1.13.1 to 1.16.0 in /build - [#33966](https://github.com/owncloud/core/issues/33966) - Bump stringstream from 0.0.5 to 0.0.6 in /build - [#33755](https://github.com/owncloud/core/issues/33755) - Bump symfony 3.4.15 to 3.4.20 - [#33001](https://github.com/owncloud/core/issues/33001) [#33460](https://github.com/owncloud/core/issues/33460) [#33667](https://github.com/owncloud/core/issues/33667) [#33821](https://github.com/owncloud/core/issues/33821) - Bump symfony/polyfill components v1.9.0 => v1.10.0 - [#33377](https://github.com/owncloud/core/issues/33377) - Bump symfony/translation from 3.4.17 to 3.4.18 - [#33429](https://github.com/owncloud/core/issues/33429) - Bump webmozart/assert (1.3.0 => 1.4.0) - [#34015](https://github.com/owncloud/core/issues/34015) - Bump zendframework/zend-inputfilter from 2.8.2 to 2.9.0 - [#33920](https://github.com/owncloud/core/issues/33920) - Patch bumps punic pear-core-minimal xdebug-handler - [#33830](https://github.com/owncloud/core/issues/33830) - Update moment JS to 2.22.2 - [#33650](https://github.com/owncloud/core/issues/33650) ### Removed - Deprecate Sharing 1.0 APIs which will be removed in ownCloud 11 - [#33220](https://github.com/owncloud/core/issues/33220) - Remove core/l10n from release build - [#33960](https://github.com/owncloud/core/issues/33960) ### Fixed - Fix missing translations in the user settings module - [#34234](https://github.com/owncloud/core/issues/34234) [#34261](https://github.com/owncloud/core/issues/34261) - Skip preview expiry when owner cannot be determined - [#34207](https://github.com/owncloud/core/issues/34207) - Allow the testing app to not be in the default apps folder - [#34196](https://github.com/owncloud/core/issues/34196) - Integrity check now detects renamed files properly - [#34085](https://github.com/owncloud/core/issues/34085) - Fix up grammar mistake in console output - [#33947](https://github.com/owncloud/core/issues/33947) - Expand occ user reset password email validation - [#33945](https://github.com/owncloud/core/issues/33945) - Return 403 instead of 500 status when uploading into share without write permissions - [#33640](https://github.com/owncloud/core/issues/33640) - Fix performance issue when fetching versions: do not iterate over all storages when only first is needed - [#33859](https://github.com/owncloud/core/issues/33859) - Config sample fixes - [#33870](https://github.com/owncloud/core/issues/33870) [#33954](https://github.com/owncloud/core/issues/33954) [#34020](https://github.com/owncloud/core/issues/34020) - Correction to default apps folder in config.sample.php - [#33912](https://github.com/owncloud/core/issues/33912) - Fix system tags object mapper for Oracle - [#33772](https://github.com/owncloud/core/issues/33772) - Adjust last login time when using auth modules - [#33752](https://github.com/owncloud/core/issues/33752) - Disable share autocomplete endpoint for members of groups excluded from sharing - [#33736](https://github.com/owncloud/core/issues/33736) - Fix issues with expiration date validation in public link dialog - [#33735](https://github.com/owncloud/core/issues/33735) - List compatible apps instead of missing ones in occ upgrade process - [#33730](https://github.com/owncloud/core/issues/33730) - Add background job to clean up orphaned DAV properties - [#33722](https://github.com/owncloud/core/issues/33722) - Fix paginated iteration when syncing users - [#33698](https://github.com/owncloud/core/issues/33698) - Cannot set 0 as value for config through OCC command - [#33643](https://github.com/owncloud/core/issues/33643) - Fix for some upgrade path that led to DAV tables missing bigint conversion - [#33603](https://github.com/owncloud/core/issues/33603) - Fix checksum verify command verbose mode and path argument handling - [#33610](https://github.com/owncloud/core/issues/33610) - Fix form to enter initial password to properly display error message - [#33453](https://github.com/owncloud/core/issues/33453) - File cache corruption check now only reports storage id once - [#33539](https://github.com/owncloud/core/issues/33539) - Fix escaping of public share names - [#33419](https://github.com/owncloud/core/issues/33419) - Update config.sample.php to fix a broken link - [#33518](https://github.com/owncloud/core/issues/33518) - Add "uid" argument to Symfony login events for consistency - [#33470](https://github.com/owncloud/core/issues/33470) - Prevent deletion of calendar group shares during cleanup - [#33394](https://github.com/owncloud/core/issues/33394) - Fix upload avatar for LDAP users - [#33369](https://github.com/owncloud/core/issues/33369) - Fix double escaping in email subject - [#33342](https://github.com/owncloud/core/issues/33342) - Add missing type hints in code - [#33314](https://github.com/owncloud/core/issues/33314) - Increase versions list performance by ignoring shared storages - [#33291](https://github.com/owncloud/core/issues/33291) - Fix PROPFIND with Depth infinity requests through Sabre update - [#28341](https://github.com/owncloud/core/issues/28341) - Adjust "has never logged in" text in occ command - [#33275](https://github.com/owncloud/core/issues/33275) - Don't remove temporary file on failure when creating office file preview - [#33234](https://github.com/owncloud/core/issues/33234) - Warning log about oc_readonly storage wrapper is now logged in debug level - [#33212](https://github.com/owncloud/core/issues/33212) - Fix occ encrypt-all command to not attempt re-encrypting already encrypted files - [#33206](https://github.com/owncloud/core/issues/33206) - Register areCredentialsValid as a sensitive logging method - [#32713](https://github.com/owncloud/core/issues/32713) - Deletion of user now also updates storages applicable fields - [#32906](https://github.com/owncloud/core/issues/32906) - Blacklist the method "setPassword" in stack traces - [#33176](https://github.com/owncloud/core/issues/33176) - Fix wording in occ command help - [#33179](https://github.com/owncloud/core/issues/33179) - Fix preLogin hook parameter inconsistencies - [#33185](https://github.com/owncloud/core/issues/33185) ## 10.0.10 - 2018-09-18 ### Added - Store user name in oc_preferences when provided by backend, use in external storage save in session mode [#32587](https://github.com/owncloud/core/pull/32587) - Support JSON format for settings passed to occ system:config:set - [#32524](https://github.com/owncloud/core/issues/32524) - occ decrypt-all command can now read password from an environment variable - [#32252](https://github.com/owncloud/core/issues/32252) [#32677](https://github.com/owncloud/core/issues/32677) - Roave Security Advisories as a development dependency - [#31818](https://github.com/owncloud/core/issues/31818) - Store timestamp when ownCloud was first installed - [#32000](https://github.com/owncloud/core/issues/32000) - Symfony events for login action with token or Apache - [#31985](https://github.com/owncloud/core/issues/31985) - Search API for files using Webdav REPORT and underlying search provider - [#31946](https://github.com/owncloud/core/issues/31946) [#32328](https://github.com/owncloud/core/issues/32328) [#32603](https://github.com/owncloud/core/issues/32603) - Add information whether user can share to capabilities API - [#31824](https://github.com/owncloud/core/issues/31824) - Reload the filelist view when accepting or rejecting a share - [#31798](https://github.com/owncloud/core/issues/31798) - Allow different language in public link share email - [#31767](https://github.com/owncloud/core/issues/31767) - Command files:scan now outputs items per second - [#32093](https://github.com/owncloud/core/issues/32093) - New option to prevent users to share with specific system groups - [#31740](https://github.com/owncloud/core/issues/31740) [#32533](https://github.com/owncloud/core/issues/32533) [#32501](https://github.com/owncloud/core/issues/32501) [#32707](https://github.com/owncloud/core/issues/32707) - Hook "loadAdditionalScripts" now also available for public link page - [#31944](https://github.com/owncloud/core/issues/31944) - Add url parameter to files app which opens a specific sidebar tab - [#32202](https://github.com/owncloud/core/issues/32202) - Retry chunks in web UI on stalled or timed out uploads - [#32170](https://github.com/owncloud/core/issues/32170) [#32335](https://github.com/owncloud/core/issues/32335) - Add log entry for each migration that is run - [#32461](https://github.com/owncloud/core/issues/32461) - Ability to create users and send them an email for password creation - [#32466](https://github.com/owncloud/core/issues/32466) - Command for resetting password now supports sending reset email and outputting link - [#32500](https://github.com/owncloud/core/issues/32500) - Added Phan static code analyzer to improve code quality - [#32492](https://github.com/owncloud/core/issues/32492) - Added method in PHP share API to set password hashes directly - [#32572](https://github.com/owncloud/core/issues/32572) - Experimental support for asynchronous MOVE operations - [#32414](https://github.com/owncloud/core/issues/32414) - Config report now contains list of all migrations that have run, for easier debugging of update issues - [configreport/#68](https://github.com/owncloud/configreport/pull/68) ### Changed - Update CA bundle - 2018-06-20 - [#32688](https://github.com/owncloud/core/issues/32688) - Minimum desktop client version is 2.3.3 - [#32657](https://github.com/owncloud/core/issues/32657) - Handle SSL certificate verifications for others than Let's Encrypt - [#31858](https://github.com/owncloud/core/issues/31858) - Insufficient storage exception now logged with "debug" log level - [#31978](https://github.com/owncloud/core/issues/31978) - Skip filecache repair step for version greater than 10.0.4 - [#31803](https://github.com/owncloud/core/issues/31803) - Bump sinon from 2.4.1 to 6.2.0 in /build - [#32319](https://github.com/owncloud/core/issues/32319) [#32662](https://github.com/owncloud/core/issues/32662) - Bump karma from 2.0.2 to 3.0.0 in /build - [#31892](https://github.com/owncloud/core/issues/31892) [#32197](https://github.com/owncloud/core/issues/32197) [#32317](https://github.com/owncloud/core/issues/32317) - Bump behat/behat from 3.4.3 to 3.5.0 - [#32318](https://github.com/owncloud/core/issues/32318) - Bump paragonie/random_compat v2.0.15 to v2.0.17 - [#32107](https://github.com/owncloud/core/issues/32107) - Bump symfony/event-dispatcher from 3.4.12 to 3.4.13 - [#32199](https://github.com/owncloud/core/issues/32199) - Bump symfony/console from 3.4.12 to 3.4.13 - [#32140](https://github.com/owncloud/core/issues/32140) - Bump symfony/routing from 3.4.12 to 3.4.13 - [#32137](https://github.com/owncloud/core/issues/32137) - Bump symfony/process from 3.4.12 to 3.4.13 - [#32135](https://github.com/owncloud/core/issues/32135) - Bump symfony/translation from 3.4.12 to 3.4.13 - [#32198](https://github.com/owncloud/core/issues/32198) - Bump symfony polyfill 1.8.0 to 1.9.0 - [#32255](https://github.com/owncloud/core/issues/32255) - Bump swiftmailer/swiftmailer from 5.4.9 to 5.4.10 - [#32200](https://github.com/owncloud/core/issues/32200) - Minor dependency bumps 2018-08-26 - [#32439](https://github.com/owncloud/core/issues/32439) - Bump symfony 3.4.11 to 3.4.12 - [#31912](https://github.com/owncloud/core/issues/31912) - Bump symfony 3.4.15 and zend-stdlib 3.2.1 - [#32499](https://github.com/owncloud/core/issues/32499) - Allow slashes in generated resource routes in app framework - [#31939](https://github.com/owncloud/core/issues/31939) - Email field is now default in user management page, users receive an email with token to set initial password - [#32466](https://github.com/owncloud/core/issues/32466) [#32648](https://github.com/owncloud/core/issues/32648) [#32636](https://github.com/owncloud/core/issues/32636) [#32672](https://github.com/owncloud/core/pull/32672) [#32672](https://github.com/owncloud/core/issues/32672) [#32685](https://github.com/owncloud/core/issues/32685) [#32690](https://github.com/owncloud/core/issues/32690) - Split of config.sample.php into two files for core and apps - [#32554](https://github.com/owncloud/core/issues/32554) [#32634](https://github.com/owncloud/core/issues/32634) ### Removed ### Fixed - Fix PHP 7.2 issue with ini_set - [#32538](https://github.com/owncloud/core/issues/32538) - Prevent logging LDAP password in case of failure - [#32592](https://github.com/owncloud/core/pull/32592) - Prevent passwords to be set to empty strings - [#32581](https://github.com/owncloud/core/pull/32581) - Fix update issue related to oc_jobs when automatically enabling market app to assist for update in OC 10 - [#32573](https://github.com/owncloud/core/pull/32573) - Trigger missing migrations in files_sharing app, adds indices and can speed up some instances - [#32562](https://github.com/owncloud/core/issues/32562) - Fix issue with spam filters when sending public link emails - [#32542](https://github.com/owncloud/core/issues/32542) - Fix version previews to fall back to icon when no preview provider is available - [#32474](https://github.com/owncloud/core/issues/32474) - Fix master key recreation - [#32504](https://github.com/owncloud/core/issues/32504) - Return correct status when IMip email delivery fails - [#32489](https://github.com/owncloud/core/issues/32489) - Fix typos in config.sample.php - [#32496](https://github.com/owncloud/core/issues/32496) - Don't check for avatar folder if not enabled - [#32490](https://github.com/owncloud/core/issues/32490) - Add missing ILogger declaration in MigrationService - [#32473](https://github.com/owncloud/core/issues/32473) [#32475](https://github.com/owncloud/core/issues/32475) - Fix JS tests for future Sinon JS update - [#32488](https://github.com/owncloud/core/issues/32488) - Command to verify checksums is now more robust - [#32360](https://github.com/owncloud/core/issues/32360) - Fix not allowed to share message - [#32429](https://github.com/owncloud/core/issues/32429) - Update php doc to reflect proper return type - [#32427](https://github.com/owncloud/core/issues/32427) - Catch more errors in SMB storage - [#32416](https://github.com/owncloud/core/issues/32416) - Don't crash on filescan where folder has symlink - [#32408](https://github.com/owncloud/core/issues/32408) - Fix issue with some special characters in queries - [#32412](https://github.com/owncloud/core/issues/32412) - Use the core exception logger functionality in cron.php - [#32404](https://github.com/owncloud/core/issues/32404) - Compare UIDs instead of objects when changing displayname - [#32409](https://github.com/owncloud/core/issues/32409) - Compare UIDs instead of objects when changing email address - [#32391](https://github.com/owncloud/core/issues/32391) - Improve performance when propagating size updates in file cache - [#32304](https://github.com/owncloud/core/issues/32304) - Prevent current chunk assembly failing by setting the exclusive file lock earlier - [#32334](https://github.com/owncloud/core/issues/32334) - Don't strip linebreaks in personal note of public link share - [#32331](https://github.com/owncloud/core/issues/32331) - Let files be overwritten by rename operations on local storage instead of pre-deleting - [#32273](https://github.com/owncloud/core/issues/32273) - Continue with upgrade even if the market app cannot be disabled - [#32324](https://github.com/owncloud/core/issues/32324) - Versions app now works also when comments app is disabled - [#32208](https://github.com/owncloud/core/issues/32208) - Fix two factor challenge page for when password has expired - [#32058](https://github.com/owncloud/core/issues/32058) - Scanner now properly resets checksum whenever a file has changed remotely - [#32284](https://github.com/owncloud/core/issues/32284) - Fix checksums not being updated on modifying shared file for objectstore - [#32364](https://github.com/owncloud/core/issues/32364) - Accept email addresses with subdomains with hyphens for public link emails - [#32281](https://github.com/owncloud/core/issues/32281) - Properly set installed_version flag when enabling app via provisioning api - [#32214](https://github.com/owncloud/core/issues/32214) - Fix API response of pending shares when the state did not change - [#32156](https://github.com/owncloud/core/issues/32156) - Read mtime from both JS properties in web UI upload for browser compatibility - [#32013](https://github.com/owncloud/core/issues/32013) - Fix warning in logs while moving FutureFile after chunk assembly - [#32166](https://github.com/owncloud/core/issues/32166) - Allow null in "Origin" header for third party clients that send it with WebDAV - [#32189](https://github.com/owncloud/core/issues/32189) - Fix calendar or reminder insertion error via CalDAV on MacOS - [#32024](https://github.com/owncloud/core/issues/32024) - Properly log failed message when token based authentication is enforced - [#31948](https://github.com/owncloud/core/issues/31948) - Prevent share access to birthday calendar - [#31882](https://github.com/owncloud/core/issues/31882) - Added space in display names of shared calendar/contact - [#31877](https://github.com/owncloud/core/issues/31877) - Deleting a user now also properly deletes their external storages and storage assignations - [#32069](https://github.com/owncloud/core/issues/32069) - Improve text about logging in config.sample.php - [#32049](https://github.com/owncloud/core/issues/32049) - Use OC_DEFAULT_MODULE constant for encryption in core - [#31838](https://github.com/owncloud/core/issues/31838) - Unset encrypted flag in file cache when running decrypt-all command - [#32027](https://github.com/owncloud/core/issues/32027) - Fix decrypt of single user in decrypt-all command - [#32168](https://github.com/owncloud/core/issues/32168) - Fix login exception in decrypt-all command - [#31986](https://github.com/owncloud/core/issues/31986) - Properly clean up encryption keys after file deletion - [#31959](https://github.com/owncloud/core/issues/31959) - Remove sensitive shared_secret data from occ config:list output - [#31997](https://github.com/owncloud/core/issues/31997) - Fix file cache update function to properly handle empty string and nulls with Oracle - [#31996](https://github.com/owncloud/core/issues/31996) - Fix bogus etag update when propagating etag for federated shares - [#31992](https://github.com/owncloud/core/issues/31992) - Display all failed recipients when sending link share email - [#31935](https://github.com/owncloud/core/issues/31935) [#32633](https://github.com/owncloud/core/issues/32633) - Lock public link share dialog while processing - [#31928](https://github.com/owncloud/core/issues/31928) - AppManager text typo and PHPdoc return tags - [#31918](https://github.com/owncloud/core/issues/31918) - Optimize file uploads with PUT method, with custom mtime, use storage instead of view - [#31891](https://github.com/owncloud/core/issues/31891) - Optimize file uploads with PUT, don't fetch and update checksum again, reuse the one from part file - [#31768](https://github.com/owncloud/core/issues/31768) - Do not throw an error when the same theme is enabled twice - [#31783](https://github.com/owncloud/core/issues/31783) - Fix repair step that removes duplicate sub shares - [#31146](https://github.com/owncloud/core/issues/31146) - Adjust code to follow coding standard - [#32116](https://github.com/owncloud/core/issues/32116) - Fix overriding for gif images in themes for CLI scripts - [#32131](https://github.com/owncloud/core/issues/32131) - Fix wording on password change page - [#32146](https://github.com/owncloud/core/issues/32146) - Fixed mount config in frontend to only load once to avoid side effects - [#32095](https://github.com/owncloud/core/issues/32095) - Don't urlencode group id to make it work with "/" and "%" - [#31109](https://github.com/owncloud/core/issues/31109) ## 10.0.9 - 2018-07-17 ### Added - Added account module middleware to be able to plug in logic after authentication - [#31883](https://github.com/owncloud/core/issues/31883) [#31933](https://github.com/owncloud/core/issues/31933) - occ user:list now takes a list of attributes to display - [#31115](https://github.com/owncloud/core/issues/31115) - Added Symfony events for user preference changes - [#31266](https://github.com/owncloud/core/issues/31266) - Added Symfony events for public links shared by email - [#31632](https://github.com/owncloud/core/issues/31632) - Added Symfony events for accept and reject for local shares - [#31702](https://github.com/owncloud/core/issues/31702) - Added support for Imprint and Privacy Policy URLs in web UI and email footers - [#31666](https://github.com/owncloud/core/issues/31666) [#31699](https://github.com/owncloud/core/issues/31699) [#31730](https://github.com/owncloud/core/issues/31730) [#31766](https://github.com/owncloud/core/pull/31766) - Added HTML template for lost password email - [#31144](https://github.com/owncloud/core/issues/31144) - Received local shares can now trigger a notification to accept or reject them, also visible in "Shared with you" section - [#31613](https://github.com/owncloud/core/issues/31613) [#31886](https://github.com/owncloud/core/issues/31886) - Rejected shares can now be accepted again in the "Shared with you" section - [#31613](https://github.com/owncloud/core/issues/31613) - Provide original exception via logging events - [#31623](https://github.com/owncloud/core/issues/31623) - Share autocomplete now displays useful tooltip when typing less characters - [#31729](https://github.com/owncloud/core/issues/31729) - Added public Webdav API for versions using a new "meta" DAV endpoint - [#31729](https://github.com/owncloud/core/pull/29207) [#29637](https://github.com/owncloud/core/pull/29637) [#31805](https://github.com/owncloud/core/issues/31805) [#31801](https://github.com/owncloud/core/issues/31801) - Added support for retrieving file previews using Webdav endpoint - [#29319](https://github.com/owncloud/core/pull/29319) [#30192](https://github.com/owncloud/core/pull/30192) [#31748](https://github.com/owncloud/core/issues/31748) [#31788](https://github.com/owncloud/core/issues/31788) [#31862](https://github.com/owncloud/core/issues/31862) [#31865](https://github.com/owncloud/core/issues/31865) - Added versioning support for primary object store - [#29607](https://github.com/owncloud/core/pull/29607) [#31285](https://github.com/owncloud/core/pull/31285) [#31595](https://github.com/owncloud/core/pull/31595) ### Changed - Updated ca-bundle.crt - [#31734](https://github.com/owncloud/core/issues/31734) - Bump symfony to 3.4.8 and other pending minor bumps - [#31221](https://github.com/owncloud/core/issues/31221) - Bump karma from 2.0.0 to 2.0.2 in /build - [#31253](https://github.com/owncloud/core/issues/31253) - Bump karma-jasmine from 1.1.1 to 1.1.2 in /build - [#31378](https://github.com/owncloud/core/issues/31378) - Bump karma-coverage from 1.1.1 to 1.1.2 in /build - [#31380](https://github.com/owncloud/core/issues/31380) - Bump zendframework/zend-inputfilter from 2.8.1 to 2.8.2 - [#31431](https://github.com/owncloud/core/issues/31431) - Bump icewind/smb from 1.1.0 to 3.0.0 in /apps/files_external/3rdparty - [#31521](https://github.com/owncloud/core/issues/31521) - Bump symfony 3.4.9 to 3.4.11 - [#31571](https://github.com/owncloud/core/issues/31571) - Update jsdoc requirement to ~3.5.5 - [#30036](https://github.com/owncloud/core/issues/30036) - Removed example theme which now lives in the [theme-example repository](https://github.com/owncloud/theme-example) - [#31447](https://github.com/owncloud/core/issues/31447) - A user who is a member of multiple groups is now excluded from sharing if at least one of their group is configured for exclusion - [#31737](https://github.com/owncloud/core/issues/31737) [#31822](https://github.com/owncloud/core/issues/31822) - Changed back default minimum search characters to 2 for share autocomplete due to confusion - [#31729](https://github.com/owncloud/core/issues/31729) - Files app UI now uses new versions API through the "meta" DAV endpoint - [#29607](https://github.com/owncloud/core/pull/29607) ### Removed - Removed old private ajax API for previews, deprecated by DAV endpoint support - [#30254](https://github.com/owncloud/core/pull/30254) - Bookmarks certificate was removed - [#31878](https://github.com/owncloud/core/issues/31878) ### Fixed - Adjustments for the notifications messages of the sharing apps - [#31947](https://github.com/owncloud/core/issues/31947) - Disable jquery globalEval - [#31972](https://github.com/owncloud/core/issues/31972) - Work around Edge browser memory leak in web UI chunked upload - [#31884](https://github.com/owncloud/core/issues/31884) - Don't fail if ISqlMigration doesn't return anything - [#31779](https://github.com/owncloud/core/issues/31779) - Fixed restoring of versions for single file shares - [#31681](https://github.com/owncloud/core/issues/31681) - Group admins are not able to create groups any more using provisioning API - [#31738](https://github.com/owncloud/core/issues/31738) - Fix Oracle for queries using ILIKE operator - [#31466](https://github.com/owncloud/core/issues/31466) - Improve user-sync command help description - [#31691](https://github.com/owncloud/core/issues/31691) - Fix deletion and restoration of files in trashbin in some partial selection scenarios - [#31700](https://github.com/owncloud/core/issues/31700) - Do not load the code of disabled theme apps - [#31478](https://github.com/owncloud/core/issues/31478) - Fix encrypt-all and decrypt-all commands to keep shares when encrypting - [#31600](https://github.com/owncloud/core/issues/31600) [#31590](https://github.com/owncloud/core/issues/31590) - Proceed with encrypt-all command by enabling user-keys if no mode is selected by user - [#31612](https://github.com/owncloud/core/issues/31612) - Validate maximum length of a username - [#31664](https://github.com/owncloud/core/issues/31664) - Save timezone as given during login - [#31493](https://github.com/owncloud/core/issues/31493) - Fix checksum computation to not apply on read-write streams to avoid potential mismatch results - [#31619](https://github.com/owncloud/core/issues/31619) - Exclude uploads directory from read-only cache mask, fixes guest app chunked uploads - [#31596](https://github.com/owncloud/core/issues/31596) - Properly normalize paths for event, no &$magic needed - [#31689](https://github.com/owncloud/core/issues/31689) - Use the correct user id in login related Symfony events - [#31605](https://github.com/owncloud/core/issues/31605) - Fix public link dialog issue when collaborative tags app is disabled - [#31581](https://github.com/owncloud/core/issues/31581) - Fix updating public link share in transfer ownership command - [#31176](https://github.com/owncloud/core/issues/31176) [#31953](https://github.com/owncloud/core/issues/31953) - Do not set the password again if it hasn't changed - [#31370](https://github.com/owncloud/core/issues/31370) - Use correct l10n to translate 'password was changed' email - [#31553](https://github.com/owncloud/core/issues/31553) - Improve text in settings/personal App Password - [#31539](https://github.com/owncloud/core/issues/31539) - Fix default language code example - [#31448](https://github.com/owncloud/core/issues/31448) - Fix double slash in versioning file copy events - [#31452](https://github.com/owncloud/core/issues/31452) - Split public password enforced capabilities based on a config - [#31499](https://github.com/owncloud/core/issues/31499) - Fix bogus exceptions related to missing DAV nodes after deletion - [#31479](https://github.com/owncloud/core/issues/31479) - Fix enabling of users by group admins in the web UI - [#31489](https://github.com/owncloud/core/issues/31489) - Fix AccountMapper to return an object or throw an exception - [#31445](https://github.com/owncloud/core/issues/31445) - Proper handling of exceptions in UserManager - [#31446](https://github.com/owncloud/core/issues/31446) - Properly cache non-existing user in UserManager - [#31446](https://github.com/owncloud/core/issues/31446) - Update verify checksums console output to flow more naturally - [#31449](https://github.com/owncloud/core/issues/31449) - Subadmin shouldn't be able to add users to their groups via API - [#31337](https://github.com/owncloud/core/issues/31337) - Catch duplicate inserts in token table - [#31460](https://github.com/owncloud/core/pull/31460) [#31794](https://github.com/owncloud/core/issues/31794) [#32041](https://github.com/owncloud/core/pull/32041) - Fix overflowing public share names in the share panel - [#31369](https://github.com/owncloud/core/issues/31369) - Fix occ user:sync to sync quota from preferences after upgrade if backend provided no quota - [#31360](https://github.com/owncloud/core/issues/31360) - Fix for Redis dev editions - [#31282](https://github.com/owncloud/core/issues/31282) - Fix mail debug message recipient field - [#31227](https://github.com/owncloud/core/issues/31227) - Prevent infinite loop in case of error in "log" event handler - [#31247](https://github.com/owncloud/core/issues/31247) - Fix HTTP status code when uploading virus-infected files - [#31260](https://github.com/owncloud/core/issues/31260) - Add back robots.txt in the release - [#31248](https://github.com/owncloud/core/issues/31248) ## 10.0.8 - 2018-04-27 ### Added - Added option for user:sync to reenable formerly disabled users - [#31124](https://github.com/owncloud/core/pull/31124) - Ability to log extra JSON fields - [#31121](https://github.com/owncloud/core/issues/31121) - Trigger event when logging - [#31121](https://github.com/owncloud/core/issues/31121) - Added command to verify and fix checksums - [#31008](https://github.com/owncloud/core/pull/31008) - Introduce seen and single user sync command line features - [#31025](https://github.com/owncloud/core/issues/31025) [#31032](https://github.com/owncloud/core/issues/31032) - Added config setting to specify minimum characters for sharing autocomplete - [#30994](https://github.com/owncloud/core/issues/30994) [#31067](https://github.com/owncloud/core/issues/31067) [#31160](https://github.com/owncloud/core/pull/31160) - Added personal note field for link share email - [#30486](https://github.com/owncloud/core/issues/30486) [#30571](https://github.com/owncloud/core/issues/30571) [#30813](https://github.com/owncloud/core/issues/30813) [#31057](https://github.com/owncloud/core/issues/31057) [#31201](https://github.com/owncloud/core/pull/31201) [#31212](https://github.com/owncloud/core/pull/31212) - Add conditional Logging target logfile for shared_secret and users - [#30443](https://github.com/owncloud/core/issues/30443) - Add option to disable link share password enforcement for write-only shares - [#30408](https://github.com/owncloud/core/issues/30408) [#30774](https://github.com/owncloud/core/issues/30774) [#30787](https://github.com/owncloud/core/issues/30787) - Add Webdav-Location header in private link redirect - [#30387](https://github.com/owncloud/core/issues/30387) [#30595](https://github.com/owncloud/core/issues/30595) - Make syslog output configurable, introduce new default that includes the request id - [#30346](https://github.com/owncloud/core/issues/30346) - Added "uid" parameter to "validatePassword" events - [#30334](https://github.com/owncloud/core/issues/30334) - Added new API event for zip file download - [#30067](https://github.com/owncloud/core/issues/30067) - Added new API event for public link creation - [#30067](https://github.com/owncloud/core/issues/30067) - Added log entry when the "data-fingerprint" command was run - [#30281](https://github.com/owncloud/core/issues/30281) - Added "heic" and "heif" as image mime types for thumbnails - [#30108](https://github.com/owncloud/core/issues/30108) - Added new API events for commenting actions - [#30142](https://github.com/owncloud/core/issues/30142) - Added "register notifier" event for use with the notification emails feature - [#30613](https://github.com/owncloud/core/issues/30613) - Added group option to files:scan command - [#30615](https://github.com/owncloud/core/issues/30615) - Added warning if no files to process in occ files:transfer-ownership command - [#30612](https://github.com/owncloud/core/issues/30612) - Added user:modify command to core - [#30652](https://github.com/owncloud/core/issues/30652) - Added config switch to enable fallback to http scheme when creating fed shares - [#30646](https://github.com/owncloud/core/issues/30646) [#31196](https://github.com/owncloud/core/issues/31196) - Added repair step for orphaned sub-shares - [#30695](https://github.com/owncloud/core/issues/30695) - Added repair step to fix orphaned reshares - [#31004](https://github.com/owncloud/core/issues/31004) - Added Symfony events for configuration changes (config.php and appconfig) - [#30788](https://github.com/owncloud/core/issues/30788) [#30937](https://github.com/owncloud/core/issues/30937) [#31107](https://github.com/owncloud/core/issues/31107) - Added Symfony event to let apps resolve private links - [#30911](https://github.com/owncloud/core/issues/30911) - Added Symfony events for delete and create share - [#31026](https://github.com/owncloud/core/issues/31026) - Added Symfony events for updating share attributes (expiration, password, name) - [#31120](https://github.com/owncloud/core/issues/31120) - Added Symfony events for group membership events - [#31003](https://github.com/owncloud/core/issues/31003) - Added Symfony events for feature change in group admin - [#31132](https://github.com/owncloud/core/issues/31132) - Added config.php option to select apps to ignore missing signature file (mostly for themes) - [#30891](https://github.com/owncloud/core/issues/30891) [#31066](https://github.com/owncloud/core/issues/31066) - Added ability for full-page frontend-only apps in info.xml - [#30918](https://github.com/owncloud/core/issues/30918) - More user-friendly email address input and handling in link share dialog - [#30945](https://github.com/owncloud/core/issues/30945) [#31142](https://github.com/owncloud/core/issues/31142) ### Changed - Set minimum php version to 5.6 in composer.json - [#31100](https://github.com/owncloud/core/issues/31100) - Bump PHP to 5.6.33 in composer - [#30403](https://github.com/owncloud/core/issues/30403) - Bump phpseclib/phpseclib from 2.0.3 to 2.0.10 - [#30052](https://github.com/owncloud/core/issues/30052) [#30537](https://github.com/owncloud/core/issues/30537) - Bump phpunit and symfony/translation to match master - [#30410](https://github.com/owncloud/core/issues/30410) - Bump guzzlehttp/guzzle from 5.3.1 to 5.3.2 - [#30217](https://github.com/owncloud/core/issues/30217) - Bump lukasreschke/id3parser from 0.0.1 to 0.0.3 - [#30085](https://github.com/owncloud/core/issues/30085) - Bump symfony to 3.4.5 - [#30689](https://github.com/owncloud/core/issues/30689) - Bump symfony/translation from 3.2.4 to 3.3.16 - [#30380](https://github.com/owncloud/core/issues/30380) - Bump latest symfony and sabre/vobject point versions - [#30266](https://github.com/owncloud/core/issues/30266) - Bump karma from 1.5.0 to 2.0.0 in /build - [#30050](https://github.com/owncloud/core/issues/30050) - Bump punic/punic from 1.6.5 to 3.1.0 - [#30550](https://github.com/owncloud/core/issues/30550) - Bump symfony to 3.4.6 and Sabre vobject to 4.1.5 - [#30768](https://github.com/owncloud/core/issues/30768) - Bump sabre/http from 4.2.3 to v4.2.4 - [#30599](https://github.com/owncloud/core/issues/30599) - Bump jakub-onderka/php-parallel-lint from 0.9.2 to 1.0.0 - [#30626](https://github.com/owncloud/core/issues/30626) - Bump behat/mink-extension from 2.3.0 to 2.3.1 - [#30706](https://github.com/owncloud/core/issues/30706) - Bump league/flysystem from 1.0.42 to 1.0.43 - [#30704](https://github.com/owncloud/core/issues/30704) - Update composer in stable10 with versions as at 2018-02-07 - [#30390](https://github.com/owncloud/core/issues/30390) - Renamed SMB logging config.php settings from "wnd" to "smb" - [#30244](https://github.com/owncloud/core/issues/30244) - Improved error messages in user:delete command - [#30164](https://github.com/owncloud/core/issues/30164) - Validate email address in mail settings section - [#30315](https://github.com/owncloud/core/issues/30315) - Only decrypt users who have already logged in with decrypt-all occ command - [#30640](https://github.com/owncloud/core/issues/30640) - Replace usage of "create_function" in PHP - [#30714](https://github.com/owncloud/core/issues/30714) - Provisioning API can now properly set default or zero quota - [#30755](https://github.com/owncloud/core/issues/30755) - User quota setting can be queried through provisioning API - [#30850](https://github.com/owncloud/core/issues/30850) ### Removed - Removed private oc_current_user Javascript variable - [#30486](https://github.com/owncloud/core/issues/30486) [#30556](https://github.com/owncloud/core/issues/30556) - Remove app store config values from config.sample.php - [#30422](https://github.com/owncloud/core/issues/30422) - Remove documentation of the theme option in config.sample.php - [#30350](https://github.com/owncloud/core/issues/30350) - Remove unused config.sample.php parameters - [#30933](https://github.com/owncloud/core/issues/30933) [#30812](https://github.com/owncloud/core/issues/30812) - Remove "Unlimited" word from quota report in personal page - [#31041](https://github.com/owncloud/core/issues/31041) ### Fixes - Prevent background scan to scan homes of users who never logged in - [#31189](https://github.com/owncloud/core/issues/31189) - Properly align three button dialogs - [#31147](https://github.com/owncloud/core/issues/31147) - Many documentation improvements in config.sample.php - [#31114](https://github.com/owncloud/core/issues/31114) [#31127](https://github.com/owncloud/core/issues/31127) [#31128](https://github.com/owncloud/core/issues/31128) [#31068](https://github.com/owncloud/core/issues/31068) [#31173](https://github.com/owncloud/core/issues/31173) [#31182](https://github.com/owncloud/core/pull/31182) - Fix some documentation paths in config.sample.php - [#30431](https://github.com/owncloud/core/issues/30431) - Fix App Framework ApiContoller initialization to fix thumbnail access - [#31104](https://github.com/owncloud/core/issues/31104) [#31183](https://github.com/owncloud/core/pull/31183) - Check apache auth on login form - [#31074](https://github.com/owncloud/core/issues/31074) - Check basic auth credentials periodically after a timeout instead of 窶ヲ - [#31076](https://github.com/owncloud/core/issues/31076) - Email autocomplete in link share dialog will not return local/federated users any more, only contacts - [#30998](https://github.com/owncloud/core/issues/30998) - Fix settings page where elements are inline when they shouldn't - [#30988](https://github.com/owncloud/core/issues/30988) - Do not log errors when uploading forbidden file format - [#30991](https://github.com/owncloud/core/issues/30991) - Fix upload issue by replacing emittingCall with separate before and after events - [#30986](https://github.com/owncloud/core/issues/30986) - Fix Symfony event emittingCall by adding return - [#31045](https://github.com/owncloud/core/issues/31045) - Properly trigger file-related Symfony events when chunking - [#31087](https://github.com/owncloud/core/issues/31087) - Remove unsupported "enable for groups" field for theme apps - [#30948](https://github.com/owncloud/core/issues/30948) - Added OneNote 2016 user agent string to make it work with Webdav - [#30965](https://github.com/owncloud/core/issues/30965) - Refactored metadata sync code to unify behavior across all login methods - [#30638](https://github.com/owncloud/core/issues/30638) - Mask "marketplace.key" in config list as it is sensitive - [#30917](https://github.com/owncloud/core/issues/30917) - Polish totp middleware a little - [#30849](https://github.com/owncloud/core/issues/30849) - Set empty authtoken names to 'none' as empty is not allowed any more - [#30908](https://github.com/owncloud/core/issues/30908) - Fix CORS OPTIONS request for unauthenticated requests - [#30912](https://github.com/owncloud/core/issues/30912) - Treat any unknown app version as 0.0.1 - [#30890](https://github.com/owncloud/core/issues/30890) - Ignore multiple slashes in http path - [#30854](https://github.com/owncloud/core/issues/30854) - Initialize root folder service later to fix user backend registration order issue - [#30810](https://github.com/owncloud/core/issues/30810) - Remove implicit login in base.php to remove bogus "Login failed" logs - [#30814](https://github.com/owncloud/core/issues/30814) - Use storage specific move operation for object store - [#30817](https://github.com/owncloud/core/issues/30817) - Fix webUI display of group containing numeric username - [#30811](https://github.com/owncloud/core/issues/30811) - Fix calendar changes limit - [#30816](https://github.com/owncloud/core/issues/30816) - Properly use error exit code for unsupported PHP version - [#30780](https://github.com/owncloud/core/issues/30780) - Unbrand Personal security sessions message - [#30754](https://github.com/owncloud/core/issues/30754) - Propagate move exception messages to the frontend - [#30791](https://github.com/owncloud/core/issues/30791) - Fix chunk size comparison for big values on 32-bit systems - [#30772](https://github.com/owncloud/core/issues/30772) - Make error origin more distinguishable in some filesystem code paths - [#30682](https://github.com/owncloud/core/issues/30682) - Don't send emails when importing calendar/events - [#30666](https://github.com/owncloud/core/issues/30666) - Adding a system configuration for global CORS domains - [#30906](https://github.com/owncloud/core/issues/30906) - Better label for CORS in settings section - [#30663](https://github.com/owncloud/core/issues/30663) - Allow regular users to change their CORS domains - [#30649](https://github.com/owncloud/core/issues/30649) - Catch session unavailable exception - [#30347](https://github.com/owncloud/core/issues/30347) [#30623](https://github.com/owncloud/core/issues/30623) - Proper HTTP status code on login exception - [#30639](https://github.com/owncloud/core/issues/30639) - Fix file mtime issue on 32-bit systems - [#30546](https://github.com/owncloud/core/issues/30546) - Fixing logout for app password scenario - [#30591](https://github.com/owncloud/core/issues/30591) - Fix wording if you are not a member of any groups - [#30558](https://github.com/owncloud/core/issues/30558) - Fix for error when querying non present log_secret - [#30470](https://github.com/owncloud/core/issues/30470) - Properly create a session for a pure token based request, fixed oauth2 issues - [#30542](https://github.com/owncloud/core/issues/30542) - Free resources in preview providers - [#30533](https://github.com/owncloud/core/issues/30533) - Continue in case of rare error in files:scan repair command - [#30494](https://github.com/owncloud/core/issues/30494) [#30618](https://github.com/owncloud/core/issues/30618) [#30959](https://github.com/owncloud/core/issues/30959) - Make theming work when theme app is outside the ownCloud root - [#30477](https://github.com/owncloud/core/issues/30477) - Don't try decrypting federated shares in decrypt-all command - [#30155](https://github.com/owncloud/core/issues/30155) - Keep null in getMetaData in Checksum storage wrapper, fixes some files:scan scenarios - [#30302](https://github.com/owncloud/core/issues/30302) - Modals dialogs can now scroll, improves link share dialog UX - [#30424](https://github.com/owncloud/core/issues/30424) - Adjust link share wording and fix translations - [#31036](https://github.com/owncloud/core/issues/31036) - Fix failure of shares which are already moved with transfer ownership - [#30161](https://github.com/owncloud/core/issues/30161) - Return 403 instead of 503 to resume syncing of desktop client - [#30353](https://github.com/owncloud/core/issues/30353) - Guide users to also check spelling for typos in federated share id - [#30355](https://github.com/owncloud/core/issues/30355) - Fixed issue with number of hidden files not updating on renaming a file - [#30359](https://github.com/owncloud/core/issues/30359) - Fix deleted items auto expiration for users with no quota - [#30163](https://github.com/owncloud/core/issues/30163) - Fix validation for new encryption storage key location - [#30357](https://github.com/owncloud/core/issues/30357) - Fix some CSRF issues on Webdav endpoint by only checking for POST method - [#30358](https://github.com/owncloud/core/issues/30358) - Prevent share icon from shrinking with long texts - [#31163](https://github.com/owncloud/core/pull/31163) - Fixed regression where a user could not set own email address in the settings page - [#30319](https://github.com/owncloud/core/issues/30319) - Fix caldav and carddav syncing when dealing with lots of data - [#30252](https://github.com/owncloud/core/issues/30252) - Don't restrain width of icon-logo - [#30282](https://github.com/owncloud/core/issues/30282) - Check trashbin permissions before moving to trash, fixes deletion as guest user - [#30240](https://github.com/owncloud/core/issues/30240) - Handle no read access to skeleton - [#30241](https://github.com/owncloud/core/issues/30241) - Fix file name escaping in error messages in web UI related to file operations - [#30193](https://github.com/owncloud/core/issues/30193) - Proper error message when trying to add user to a group they are already member of in web UI - [#30194](https://github.com/owncloud/core/issues/30194) - Show new basename and extension while waiting for rename operation to finish in web UI - [#30040](https://github.com/owncloud/core/issues/30040) - Fix app author parsing in apps page - [#30043](https://github.com/owncloud/core/issues/30043) - Validate system path data used in findBinaryPath - [#30061](https://github.com/owncloud/core/issues/30061) - Fix deletion of group with special characters in web UI - [#30111](https://github.com/owncloud/core/issues/30111) - Fix missing preview in file upload conflict window - [#30125](https://github.com/owncloud/core/issues/30125) - Fix files endpoint bug when downloading vCard - [#30149](https://github.com/owncloud/core/issues/30149) - Properly filter link share email parameters - [#30165](https://github.com/owncloud/core/issues/30165) - Filter sender display name in mail notification handler - [#31056](https://github.com/owncloud/core/issues/31056) - Filter file name when sending internal mail - [#31046](https://github.com/owncloud/core/issues/31046) - Convert null to empty string for Oracle in file cache accessor - [#30224](https://github.com/owncloud/core/issues/30224) - Use LargeFileHelper to calculate log file size - fixes #30227 - [#30234](https://github.com/owncloud/core/issues/30234) ## 10.0.7 - 2018-01-19 ### Fixed - Fix various issues about null user errors - [#30450](https://github.com/owncloud/core/issues/30450) - Solve OAuth token expiry issue - [#30481](https://github.com/owncloud/core/issues/30481) - Fixed issues related to app passwords and account lock-outs - [#30363](https://github.com/owncloud/core/issues/30363) ## 10.0.6 - 2018-01-29 ### Fixed - Fix missing build dependency for L18N - [#30265](https://github.com/owncloud/core/pull/30265) ## 10.0.5 - 2018-01-23 ### Added - Add php-intl as hard requirement - [#29539](https://github.com/owncloud/core/issues/29539) - Optionally show server hostname in status.php - [#29471](https://github.com/owncloud/core/issues/29471) - Add link for logfiles docs in exception page and simplify text - [#29674](https://github.com/owncloud/core/issues/29674) - Link to trusted domains docs in error message - [#29730](https://github.com/owncloud/core/issues/29730) - Add indices on share table - [#29883](https://github.com/owncloud/core/issues/29883) [#29592](https://github.com/owncloud/core/issues/29592) - Add dispatcher event for "unshare from self" action - [#29851](https://github.com/owncloud/core/issues/29851) - Technology preview for PHP 7.2 support - [#29878](https://github.com/owncloud/core/issues/29878) - Added public hooks for file operations using Symfony Event Dispatcher - [#29939](https://github.com/owncloud/core/issues/29939) - Expose getAppPath() and getAppWebPath() on the AppManager service [#30041](https://github.com/owncloud/core/pull/30041) [#30150](https://github.com/owncloud/core/pull/30150) - Add warning in settings page when running in debug mode - [#29936](https://github.com/owncloud/core/issues/29936) ### Changed - Switch Webdav URL in field in navigation panel to the new endpoint - [#29766](https://github.com/owncloud/core/issues/29766) - Require a minimum of 1 character for the application password name - [#29831](https://github.com/owncloud/core/issues/29831) - Only allow a single active theme app with no magic fallbacks to inactive app themes - [#29854](https://github.com/owncloud/core/issues/29854) - Config report now hides email address from email config - [#29949](https://github.com/owncloud/core/issues/29949) - Change "remote" to "federated" suffix in sharing autocomplete dialog. - [#30046](https://github.com/owncloud/core/issues/30046) [#30171](https://github.com/owncloud/core/issues/30171) ### Removed - Removed old Dropbox storage backend, people should use the [files_external_dropbox app](https://github.com/owncloud/files_external_dropbox/) instead - [#29135](https://github.com/owncloud/core/issues/29135) - Revoke tasks.crt - [#29882](https://github.com/owncloud/core/issues/29882) - Remove unused composer dependency on natxet/CssMin - [#29930](https://github.com/owncloud/core/issues/29930) ### Fixed - Fix Dropbox / GDrive oauth handshake handling - [#30071](https://github.com/owncloud/core/pull/30071) - Redisplay login page on CSRF error - [#30035](https://github.com/owncloud/core/issues/30035) - Do not reset display name to uid on sso login - [#30038](https://github.com/owncloud/core/issues/30038) - Do not automatically disable apps of certain types - [#29870](https://github.com/owncloud/core/issues/29870) - Fix provisioning API when dealing with group name "0" - [#30004](https://github.com/owncloud/core/issues/30004) - Tweak occ command help output - [#29959](https://github.com/owncloud/core/issues/29959) - Now using upsert instead of insertIfNotExists for file cache updates, fixes concurrency issues - [#29934](https://github.com/owncloud/core/issues/29934) - Only set CORS headers on Webdav endpoint when Origin header is specified - [#29874](https://github.com/owncloud/core/issues/29874) - Ignore broken/dead symlinks on filescan - [#28959](https://github.com/owncloud/core/issues/28959) - Improve performance by caching non-existing accounts - [#29866](https://github.com/owncloud/core/issues/29866) - Fix template location order by searching the enabled theme app first - [#29867](https://github.com/owncloud/core/issues/29867) - Actually log message instead of {$message} - [#29844](https://github.com/owncloud/core/issues/29844) - Improved performance on new DAV endpoint by skipping querying parent nodes - [#29834](https://github.com/owncloud/core/issues/29834) - Adjust error message about PHP compatibility to say PHP X.X like previous line. - [#29828](https://github.com/owncloud/core/issues/29828) - Raise more useful message when constructor are not resolvable - [#29760](https://github.com/owncloud/core/issues/29760) - Fix wording for versions expiration occ command - [#29671](https://github.com/owncloud/core/issues/29671) - Handle invalid or missing external storage backend to keep mount point visible - [#29562](https://github.com/owncloud/core/issues/29562) - Fix integrity check when owncloud is not installed - [#29692](https://github.com/owncloud/core/issues/29692) - Fix issues about unsharing with some scenarios after moving the share - [#29716](https://github.com/owncloud/core/issues/29716) - Allow group 0 to be created by provisioning API - [#29734](https://github.com/owncloud/core/issues/29734) - Do not reset quota if it was not provided - [#29673](https://github.com/owncloud/core/issues/29673) - Improve quota value validation - check size only if size key is set - [#29743](https://github.com/owncloud/core/issues/29743) - Code cleanup - [#29799](https://github.com/owncloud/core/issues/29799) ## 10.0.4 - 2017-12-06 ### Added - Added support for eml mimetype - [#29204](https://github.com/owncloud/core/issues/29204) - Added "occ dav:cleanup-chunks" command to clean up expired uploads - [#29180](https://github.com/owncloud/core/issues/29180) - Added "occ files:scan" repair mode to repair mismatch filecache paths - [#29074](https://github.com/owncloud/core/issues/29074) [#29232](https://github.com/owncloud/core/issues/29232) - Added occ command to change/recreate master-key - [#29260](https://github.com/owncloud/core/issues/29260) [#29735](https://github.com/owncloud/core/issues/29735) - Detailed mode for "occ security:routes" - [#29095](https://github.com/owncloud/core/issues/29095) - Webdav property to retrieve a private link to files or folders - [#29041](https://github.com/owncloud/core/issues/29041) - CORS support for public API routes - [#28852](https://github.com/owncloud/core/issues/28852) [#29741](https://github.com/owncloud/core/issues/29741) [#29749](https://github.com/owncloud/core/issues/29749) - More "files_sharing" capabilities entries - [#29040](https://github.com/owncloud/core/issues/29040) - Display server name in admin page, don't show in status.php - [#28938](https://github.com/owncloud/core/issues/28938) - Validate public link mail on the client side - [#29042](https://github.com/owncloud/core/issues/29042) - Expose XHR response in share dialog autocomplete callback for extensions - [#29231](https://github.com/owncloud/core/issues/29231) - Let apps provide icons for settings sections - [#29358](https://github.com/owncloud/core/issues/29358) - Added cancellable prehooks for logout operation - [#29352](https://github.com/owncloud/core/issues/29352) - Markdown support for app descriptions in apps settings panel - [#29333](https://github.com/owncloud/core/issues/29333) - Add option to allow user to share only with the groups they belong to - [#29391](https://github.com/owncloud/core/issues/29391) - Cacheable storage adapter for use by Flysystem based external storage backends - [#29414](https://github.com/owncloud/core/issues/29414) - Add user additional info field for share autocomplete - [#29457](https://github.com/owncloud/core/issues/29457) - Add dispatcher event for remote fed shares - [#29482](https://github.com/owncloud/core/issues/29482) - Adding mode of operations - either single-instance or clus窶ヲ - [#29492](https://github.com/owncloud/core/issues/29492) - Added support for MariaDB 10.2.7+ - [#29240](https://github.com/owncloud/core/issues/29240) - Admins can now exclude files from integrity check in config.php - [#29460](https://github.com/owncloud/core/issues/29460) - Use X-Request-ID header as request id if provided by client, useful for logging - [#29434](https://github.com/owncloud/core/issues/29434) - Added authentication headers verification to validate the session - [#29525](https://github.com/owncloud/core/issues/29525) - Added IServiceLoader on server container to load app service classes from XML tags in info.xml - [#29525](https://github.com/owncloud/core/issues/29525) - Trigger events for federated shares - [#29566](https://github.com/owncloud/core/issues/29566) ### Changed - Exclude mimetypelist.js from integrity check - [#29048](https://github.com/owncloud/core/issues/29048) [#29316](https://github.com/owncloud/core/issues/29316) - Refactor set and reset of capabilities - [#29200](https://github.com/owncloud/core/issues/29200) - All amazon locations support v4 now - v3 deprecated - [#29153](https://github.com/owncloud/core/issues/29153) - Modified time value of files is now 64 bits long - [#28961](https://github.com/owncloud/core/issues/28961) - User names must now be at least 3 characters long - [#29237](https://github.com/owncloud/core/issues/29237) - AccountMapper get by email is now case insensitive - [#29341](https://github.com/owncloud/core/issues/29341) - Remove deprecated federated share API warning as it needlessly pollutes logs - [#29364](https://github.com/owncloud/core/issues/29364) - Improve UI for public link sharing permissions for folders - [#29413](https://github.com/owncloud/core/issues/29413) - Replace notify user for local shares with button - [#29463](https://github.com/owncloud/core/issues/29463) - Log out current user after submitting form in password reset page - [#29464](https://github.com/owncloud/core/issues/29464) - Update minimum supported browser versions - [#29507](https://github.com/owncloud/core/issues/29507) - Admins can now change display name even when its modification is disallowed for regular users - [#29442](https://github.com/owncloud/core/issues/29442) ### Removed - Remove AvatarPermissions repair step - [#29202](https://github.com/owncloud/core/issues/29202) - Remove unused FTP code - [#29186](https://github.com/owncloud/core/issues/29186) - Remove app store related code obsoleted by market app - [#29249](https://github.com/owncloud/core/issues/29249) - Remove a route to removed script - [#29553](https://github.com/owncloud/core/issues/29553) ### Fixed - Corrected namespace for OC\Memcache\ArrayCache which caused errors on some environments - [#29219](https://github.com/owncloud/core/issues/29219) - External storage Javascript code from apps is now loaded correctly (fixes Dropbox app and others) - [#29225](https://github.com/owncloud/core/issues/29225) - Use product name from theme - [#29251](https://github.com/owncloud/core/issues/29251) - Make sure the external storage folder name is editable when returning from OAuth authorization - [#29253](https://github.com/owncloud/core/issues/29253) - Fix duplicate external storage config that appear sometimes when returning from OAuth authorization - [#29254](https://github.com/owncloud/core/issues/29254) - Log exceptions in decrypt-all command - [#29248](https://github.com/owncloud/core/issues/29248) - SFTP key pair mode now works again - [#29156](https://github.com/owncloud/core/issues/29156) - Use correct class namespace for ownCloud ext storage - [#28935](https://github.com/owncloud/core/issues/28935) - Fix generated zip file to avoid errors with some zip tools - [#29149](https://github.com/owncloud/core/issues/29149) - Fix position of dialog boxes - [#29133](https://github.com/owncloud/core/issues/29133) [#29467](https://github.com/owncloud/core/issues/29467) - Move 64bit mtime migration from dav to core - [#29121](https://github.com/owncloud/core/issues/29121) - Allow 0 byte quota to be entered on UI - [#29113](https://github.com/owncloud/core/issues/29113) - Don't display warning about limited commands when running maintenance:install - [#28968](https://github.com/owncloud/core/issues/28968) - Handle no u…
Backport of #31856
Do no longer (wrongly) rewrite URLs like
for automated SSL certificate verifications. All (common commercial) certificate authorities (CA) except Let's Encrypt (via ACME) seem to use "pki-validation" rather "acme-challenge" for their domain control validation (DCV). Note that this is required inside of ownCloud rather on web server level due to shared web hosting systems, where the customer/user might not be able to do this on web server level (Apache/Nginx configuration changes for the virtual host).
As per https://owncloud.org/community/develop/contributor-agreement/ I am releasing my code/contribution (this PR) under the MIT license.