Roeland Jago Douma
|
514426e27d
Only trust the X-FORWARDED-HOST header for trusted proxies
|
5 years ago |
Oliver Wegner
|
401ca28f07
Adding handling of CIDR notation to trusted_proxies for IPv4
|
6 years ago |
Roeland Jago Douma
|
d179186430
Remove testcase
|
6 years ago |
Roeland Jago Douma
|
0ee45d3d20
Fix proper types
|
6 years ago |
Bjoern Schiessle
|
f0202245ee
allow 'Nextcloud' in the user agent string of Android
|
7 years ago |
Morris Jobke
|
43e498844e
Use ::class in test mocks
|
7 years ago |
Roeland Jago Douma
|
c257cd57d4
Handle SameSiteCookie check for index.php in AppFramework Middleware
|
7 years ago |
Roeland Jago Douma
|
2a9192334e
Don't try to parse empty body if there is no body
|
7 years ago |
Robin Appelman
|
9a8cef965f
add test for skipping cookie checks for ocs
|
7 years ago |
Christoph Wurst
|
5e728d0eda
oc_token should be nc_token
|
7 years ago |
Lukas Reschke
|
a05b8b7953
Harden cookies more appropriate
|
8 years ago |
Joas Schilling
|
c20ab0049f
Identify Chromium as Chrome
|
8 years ago |
Joas Schilling
|
f9cea0b582
Merge pull request #797 from nextcloud/only-match-for-auth-cookie
|
8 years ago |
Lukas Reschke
|
d50e7ee36c
Remove reading PATH_INFO from server variable
|
8 years ago |
Lukas Reschke
|
b53ea18ea5
Match only for actual session cookie
|
8 years ago |
Lukas Reschke
|
a299fa38a9
[master] Port Same-Site Cookies to master
|
8 years ago |
Joas Schilling
|
94ad54ec9b
Move tests/ to PSR-4 (#24731)
|
8 years ago |