[Pkg-owncloud-commits] [owncloud] annotated tag v4.0.3 created (now 6df5ead)

David Prévot taffit at alioth.debian.org
Fri Nov 8 23:10:03 UTC 2013


This is an automated email from the git hooks/post-receive script.

taffit pushed a change to annotated tag v4.0.3
in repository owncloud.

        at  6df5ead   (tag)
   tagging  b591c830088cbde14d7cad3c205ddf929f07e33c (commit)
  replaces  v4.0.1
 tagged by  Frank Karlitschek
        on  Fri Jun 22 21:15:32 2012 +0200

- Log -----------------------------------------------------------------
4.0.3

Arthur Schiwon (25):
      LDAP: link to documentation on settings page
      Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4
      commited a bit too much before
      make it possible to load apps seperately. needed to fix oc-910 without breaking oc-863
      load authentication apps before checking wether user exists. fixes oc-910
      Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4
      linkTo instead of hard links in Files and Files_Archive. Hope that makes sense.
      LDPA: don't drop legal whitespaces when sanitizing DN. Fixes oc-914
      ldap: check index carefully, can be 0
      ldap: correct query condition and determining of success
      ldap: enable the destructor
      LDAP: cache the results, reduce LDAP searches
      Sharing, fix: connect to hooks from the correct classes
      typo in var
      ldap: check array for emptiness, not nullness
      Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4
      LDAP: offer config option for Group Display Name attribute
      Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4
      reverting 8c7fa15aaf98e31646e4306e7819d1d2b725a7e1, differs between OC3 and 4
      LDAP: only map users within the User Base Tree
      forgotten $, incorrect  subtract
      bookmarks: make read later-button draggable again, fixes oc-944
      make bookmarks bookmarklet work again, kudos to Victor Dubiniuk
      LDAP: cheaper userExists() implementation
      remove unnecessary closing PHP tag

Bart Visscher (19):
      Gallery: Fix database creation on update, also only from version less then 0.5
      Make check for writable apps dir configurable
      Add help texts to config options in config.sample.php
      Add stat cache to OC_Connector_Sabre_Node and OC_Connector_Sabre_File
      Add cache for getStorage and getInternalPath functions.
      Smarter code for OC_FileProxy
      Don't use substr to get first char of string
      Tasks: Use POST for ajax calls that change data
      Tasks: Fix resizing of the content part
      Load app before running update script
      Fix webdav property name compare
      Calendar: Write-close session to enable parallel events.php requests
      Only check for apps owncloud version requirment when there is a new owncloud version
      Remember result of OC_User::isLoggedIn, can be very expensive to check
      Prefer requested app before redirecting to default page
      Tasks: Fix position of the summary input
      Tasks: Use list label for ordering by list
      Tasks: Add delete action
      Fix initialization of OC_Filesystem setup from DAV

Bartek Przybylski (22):
      git status
      new db scheme
      navigate on galleries
      use fancybox to display image preview
      aviod incorrect image size returning in gallery listing
      removing test image
      hack for file download
      replace spaces with tabs, use const and linkTo instead of static path
      adding title when fancybox is displayed
      pictures: update script and removal some all stuff
      adding missing file
      remove old code
      adding navigation bar to gallery
      hide share button until sharing wont be fixed
      tabs for spaces, fix array key name
      removing app access check, fix title for links in tiles
      handle encrypted images files in oc_image
      add function in filesystem to strip webroot
      gallery: removing search provider for now
      fix first time image loading error
      adding missing file
      fix variable name and undefined index notice

Bjoern Schiessle (41):
      Don't allow user to delete, rename and re-share the "Shared" directory
      no move (rename) operation for "Shared" directory
      don't allow user to delete Shared dir via webdav and sync client (bug #774)
      prevent xss attacks by manipulating text file names
      prevent xss attacks by manipulating image file names
      xss vulnerability fixed
      xss vulnerability fixed
      show pictures in folder with special characters, e.g. '+'
      fixed var name, $filename should be $foldername
      fixed broken lines in user table
      fix for bug #872: Folders not holding any images are ignored, even if they hold subfolders with images
      Merge branch 'stable4' of gitorious.org:owncloud/owncloud into stable4
      code cleanup from previous commit
      applied patch provided by bug #966 to fix broken user specific quota settings
      committed patch (bug #967) to add missing translations for file actions
      block slashes only for new files and new folders but not for file upload from url (bug #964)
      Label the delete operation "unshare" for files in the "Shared" folder to reduce
      urlencode link fort password reset (bug #970)
      suppress warning if /dev/urandom is not readable (bug #997)
      xss vulnerability fixed for fancybox image viewer
      debugging output removed
      fixed xss vulnerability in un-packed version of jquery.fancybox and repack it
      prevent xss attacks also if some javascript ends up in the alt-tag
      fixed bug #996: first picture in folder is repeated in the last position behaving like a directory
      applied merge request #128: fixed some sorting and display issues with gallery app.
      fixed xss vulnerability
      escape log messages to avoid possible js execution
      don't add the "Shared"-directory size to users quota
      ignore "Shared"-directory when calculating free space
      fixed broken function call
      quota calculation fixed
      backport of sanitizeHTML() function
      use new sanitize HTML function backported
      use new sanitizeHTML() function
      use sanitizeHTML() function
      no need to escape the title
      Merge branch 'stable4' of gitorious.org:owncloud/owncloud into stable4
      check if user is allowed to edit bookmarks
      date don't change correctly in the view list (bug #973) fixed
      use sanitizeHTML() function
      log messages are looking nicer if they are not escaped. (xss prevention happens on another place)

Brice Maron (2):
      Hide image with no source (avoid placeholder img)
      Correct File cache error with postgresql

Frank Karlitschek (12):
      add deprecated warning
      more reliable host detection for reverse proxy scenarios
      CLI is no availabe in stable4
      fi login for hosts running n port 80
      backport the password salting fix.
      finally fix the updater. next is an automatic updater. but this is a bit more tricky.
      paging not yet implemented. increasing pagesize to 100 as a temporary quickfix
      let´s put the files_odfviewer application into the stable4 branch for convinience. We release it as part of ownCloud 4.0.x anyways.
      XSS--
      4.0.2
      check if the data directory is accessible via http. Show a big security warning if yes
      4.0.3

Georg Ehrke (17):
      fix loading of OC::$REQUESTEDAPP if WTFE the app parameter is given but empty aka /?app
      fix creation of monthly repeated events
      increase height of event dialog
      fix XSS in Calendar
      fix another XSS
      increase possible size of uri in database - fix oc-140
      increase version of calendar app to force db upgrade
      show username of the body who shares in the summary
      fix a ui bug for calendar sharing
      another ui fix
      fix another ui bug of calendar
      remove a closing php tag in calendar
      fix merge conflicts
      fix mimetype for cdr files - bugfix for oc 559
      make edit event form work with DateTime Property UTC
      fix a PHP Notice
      fix calendar

Lukas Reschke (5):
      Sanitizing user input
      Sanitize user input
      Using POST instead of GET.
      Sanitzing user input
      Merge branch 'stable4' of gitorious.org:owncloud/owncloud into stable4

Michael Gapczynski (5):
      Supress any warnings if log file does not exist
      Remove old internal mail call for password reset, fixes bug oc-934
      Fix incorrect creation of filesystem for user at group in data folder during shares
      Check for '\' as well when searching for parent folders, because Windows returns '\' for dirname()
      Only call OC_FileCache::get('/Shared') if it exists in the file cache, prevents premature addition of the Shared folder to the file cache

Robin Appelman (14):
      update file paths in filecache when the parent is renamed
      prevent creating files with a / the name
      update translations
      fix infinite redirect during setup for windows hosts
      fix potential xss in multiselect
      don't show other users file if the filesystem is not index already
      use absolute path for file proxies
      add binary test case for encryption
      fix encryption for binary files
      fix encrypted flags not being saved correctly
      truncate decrypted files based on size
      fix saved file size for uploaded files
      only use 1 fsview when initializing encryption
      dont change the encryption key during the test case

Thomas Mueller (1):
      fixes oc-668

Thomas Tanghus (35):
      Contacts: When editing photo on a newly created contact the name in the contact list was cleared.
      Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4
      Corrected typos.
      Contacts: Import upload button was obscured on Android browser.
      Calendar: Added more explicit sync links and fixed indentation.
      Migration: Fixed wrong download URL: http://forum.owncloud.org/viewtopic.php?f=4&t=2511
      Contacts: Closed stupid XSS hole. Thanks AnybodyElse ;-)
      Don't fix bugs not present in this branch ;-)
      Contacts: Use POST instead of GET.
      Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4
      Code cleanup.
      Changed preferences configvalue to clob. Fixes several bugs e.g. oc-825 and oc-743.
      Fixed merge conflict.
      Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4
      Contacts: 11th hour fix for invalid VCARD from CardDAV.
      Categories: Turned the debugging down a bit.
      Contacts: Fix NOTE also on add, not just save.
      Contacts: Fix encoding errors, import errors, developer headache, paint cute kittens and pink clouds ;-)
      Fix js for missing address fields.
      Fix copy/paste error.
      Add .vimrc to .gitignore.
      Contacts: Final (for now) fix to encoding probs on import.
      Redirect HTTP Auth requests to REQUEST_URI. Partial fix for http://bugs.owncloud.org/thebuggenie/owncloud/issues/oc-874
      Allow same host redirects (/somepath).
      Remove check for encryption.
      Backport CSRF prevention.
      Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4
      Contacts: Implement CSRF prevention.
      Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4
      Remove debug statements.
      Files: Double encode download links. Fix for oc-1016.
      files_imageviewer: Double encode paths. Fixes oc-1016.
      PDF Viewer: Double encode link.
      Removed erroneous value attributes. Partial fix for oc-1029.
      Only search for VEVENTs.

Tom Needham (4):
      Validate email on save
      Move user import to personal settings. Fix user migration between servers.
      user_migrate: remove old code
      Text Editor: fix editor positioning

Victor Dubiniuk (2):
      Fix mime-type detection
      Reverting 249190c89bc1c2effd8aaad1052d9a0ccf0bfe37. Fixed in master

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-owncloud/owncloud.git



More information about the Pkg-owncloud-commits mailing list