ce1ca88fcc
Merge pull request #342 from EdouardVanbelle/audit
2026-05-04 19:29:15 +02:00
ff18a2f085
Merge pull request #341 from EdouardVanbelle/style/clippy-warning-fix
...
style(server): correct clippy warnings
2026-05-04 18:52:01 +02:00
0f8eb6d3ab
chore: audit: ignore rustls-webpki 0.101.7 issue
...
# rustls-webpki 0.101.7 — three advisories, all transitive via AWS SDK → rustls 0.21.12.
# aws-sdk-s3 1.x (latest) has not yet migrated to rustls 0.23.x; no upgrade path available.
# Severity: low — exploitation requires either a rogue CA or a MitM on AWS S3 infrastructure.
# RUSTSEC-2026-0104: DoS via panic in CRL parsing (only if CRLs are processed).
# RUSTSEC-2026-0098: URI name constraints ignored (requires CA misissuance).
# RUSTSEC-2026-0099: Wildcard name constraint bypass (requires CA misissuance).
"RUSTSEC-2026-0104",
"RUSTSEC-2026-0098",
"RUSTSEC-2026-0099",
# instant unmaintained — transitive via azure_core 0.21.0 (latest available).
# No direct security impact; no upgrade path exists.
"RUSTSEC-2024-0384",
2026-05-04 14:25:45 +02:00
46e823ffda
chore: move specific CI audit rules into global .cargo/audit.toml
2026-05-04 14:23:01 +02:00
b6eec61677
chore: update Cargo dependencies to reduce security audit issues
2026-05-04 14:01:00 +02:00
fde8d9d69f
chore: add audit in justfile
2026-05-04 14:01:00 +02:00
6e1c435098
style(server): correct clippy warnings
2026-05-04 12:58:30 +02:00
97ea87efc2
Merge pull request #337 from gidsi/fix/carddav-bugs
2026-05-01 09:43:45 +02:00
c041dfece4
fix(carddav): resolve PROPFIND 404 and MKCOL 500 bugs
2026-05-01 09:10:23 +02:00
af44d67ff8
Merge pull request #336 from gidsi/fix/caldav-username-prefix-routing
2026-04-30 23:39:20 +02:00
d0086bb433
fix(dav): handle username prefix in all CalDAV and CardDAV route handlers
...
The PROPFIND handlers (added in #153 ) handle the /caldav/{username}/ and
/carddav/{username}/ prefixes returned by discovery, but do so via an
expensive database call to distinguish usernames from UUIDs. The remaining
handlers (PUT, GET, DELETE, REPORT, PROPPATCH) don't handle the prefix
at all, causing 500 errors when standard clients (DAVx5, Apple Calendar,
Thunderbird) follow the discovery URLs.
This commit:
1. Adds a strip_username_prefix() helper that uses a UUID parse check
to distinguish collection IDs from usernames (no DB call needed).
2. Applies it to PUT, GET, DELETE, REPORT, and PROPPATCH handlers in
both caldav_handler.rs and carddav_handler.rs.
3. Refactors PROPFIND in both files to use the same UUID heuristic for
consistency, avoiding unnecessary database queries.
Includes 7 unit tests for the helper function.
2026-04-30 14:14:14 +02:00
05d3b2abaa
Merge pull request #327 from EdouardVanbelle/style/claude-please-please-please-no-more-duplicate
...
style(claude): minimize code duplicate...
2026-04-27 22:02:02 +02:00
444d242e63
style(claude): minimize code duplicate...
2026-04-27 21:41:38 +02:00
84b5f1da4e
Merge pull request #325 from EdouardVanbelle/fix/rust-linter
2026-04-27 20:32:54 +02:00
3a315ae75d
chore(rust): use same params for clippy as the CI + correct clippy warnings
2026-04-27 20:25:33 +02:00
30fd3cc488
Fix thumbnail generation for CDC blob storage
2026-04-26 11:55:05 +02:00
8c2598c555
Merge pull request #321 from onthebed/clawoss/docs/316-wopi-public-base-url
2026-04-26 09:19:26 +02:00
f22987e7b2
Merge pull request #319 from EdouardVanbelle/refactor/fix-css-direct-colors
2026-04-26 09:17:49 +02:00
c669b72a4e
Merge pull request #317 from EdouardVanbelle/refactor/i18n
2026-04-26 09:17:06 +02:00
0629177278
docs(wopi): document public and callback base URLs
...
Clarify how OXICLOUD_WOPI_PUBLIC_BASE_URL and OXICLOUD_WOPI_BASE_URL
should be set when the office editor runs on a different hostname.
2026-04-26 13:16:04 +08:00
f5dade1551
refactor(ui): css: use of variables colors only
2026-04-26 01:16:40 +02:00
08cbf3a423
style(ui): apply biome recos
2026-04-26 00:22:49 +02:00
ae15d5adc5
chore(ui): bump cache name to ensure refresh
2026-04-26 00:13:50 +02:00
3d8bd2d618
refactor(ui): i18n: apply translation (made by Claude)
2026-04-26 00:13:46 +02:00
5c19564102
refactor(ui): i18n: add missing + correct keys
2026-04-26 00:13:39 +02:00
75d3984b8f
refactor(ui): i18n: remove unnecessary wrappers
2026-04-26 00:13:12 +02:00
4e2029969e
refactor(ui): remove unnecessary checks (i18n is always defined)
2026-04-26 00:12:44 +02:00
156f3bc7ba
Merge pull request #309 from EdouardVanbelle/refactor/keep-badge-order
2026-04-25 21:20:58 +02:00
7b56b518d8
notification: remove dead code (notification class always present)
2026-04-25 21:10:04 +02:00
e148a92f5d
refactor(ui): use hidden class for upload + menu
2026-04-25 21:10:04 +02:00
35fc9a0619
improve(ui): share-dialog: click outside of dialog closes the window
2026-04-25 21:10:04 +02:00
fc8e529e7d
refactor(ui): modal: use hidden class
2026-04-25 21:10:04 +02:00
a38bcc01de
refactor(ui): normalize about modal with hidden class
2026-04-25 21:09:55 +02:00
832c9ab577
improve(ui): dialog: add escape key on shared dialog + perfer hidden class
2026-04-25 21:09:41 +02:00
24967489e1
improve(ui) favorite star: remove duplicate information on item + badge-shared: click on it to open share dialog
2026-04-25 21:09:05 +02:00
bdb5a6c7a9
fix(ui): correct close button on shared dialog
...
- close is more appropriate rather cancel
- translate shared dialog
2026-04-25 21:09:05 +02:00
1fd92f9efa
fix(ui): update shared badge on change
2026-04-25 21:08:38 +02:00
1d8da579cc
refactor(ui): keep badges order (favorite, shared)
2026-04-24 23:07:33 +02:00
9095a80da2
Merge pull request #314 from onthebed/clawoss/fix/311-wopi-discovery-unescape
...
fix(wopi): decode escaped discovery action URLs
2026-04-24 21:50:36 +02:00
fa5efe0fd0
fix(wopi): decode escaped discovery action URLs
...
Decode XML-escaped WOPI discovery action attributes before storing them
so generated editor URLs use real query separators instead of literal
& entities. Add regression coverage for parsed actions and generated
edit URLs.
2026-04-25 03:43:30 +08:00
b603ebcdd3
Increase Docker publish timeout
2026-04-23 07:58:58 +02:00
e4847078dc
quick fix
2026-04-22 22:41:08 +02:00
7809d998de
Fix Docker publish release trigger
2026-04-22 22:40:32 +02:00
c0cb86c273
docs: migrate legacy docs to official site
2026-04-22 07:50:41 +02:00
e10a908f07
chore(release): bump version to 0.5.6
2026-04-21 18:41:21 +02:00
36f7602d3f
new images
2026-04-20 21:30:27 +02:00
d18bf0d1ce
new images
2026-04-20 21:09:30 +02:00
5288e692f0
Merge pull request #308 from lesgrandsvoisins/main
2026-04-19 12:31:59 +02:00
afffe3d0a1
Corrected sso to oauth2 in config
2026-04-19 11:47:23 +02:00
5caa6894db
Merge pull request #307 from lesgrandsvoisins/main
2026-04-19 11:41:41 +02:00
Dionisio Pozo