-
Notifications
You must be signed in to change notification settings - Fork 2.1k
Pull requests: owncloud/core
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
feat: G2 code-signing verifier (Mode-1) with legacy G1 transition
#41680
opened Jul 13, 2026 by
DeepDiver1975
Member
Loading…
4 of 7 tasks
chore(deps): update sabre/event PHP dependency [full-ci]
#41676
opened Jul 11, 2026 by
phil-davis
Contributor
•
Draft
fix: don't cache the 'en' language fallback on anonymous pages (#41618)
#41663
opened Jun 30, 2026 by
DeepDiver1975
Member
Loading…
test: check the XML returned by occ commands in acceptance tests
#41655
opened Jun 26, 2026 by
phil-davis
Contributor
•
Draft
fix: normalise trashbin-original-location PROPFIND response (full-ci)
#41649
opened Jun 23, 2026 by
phil-davis
Contributor
Loading…
chore(deps): bump @bower_components/jquery-ui from 1.10.0 to 1.12.1 in /build
dependencies
javascript
#41647
opened Jun 21, 2026 by
dependabot
Bot
Loading…
fix(trashbin): don't overwrite existing file when restoring to a target (#35974)
#41645
opened Jun 21, 2026 by
DeepDiver1975
Member
Loading…
fix(backgroundjob): don't log ERROR for stale job rows of removed apps (#35589)
#41644
opened Jun 21, 2026 by
DeepDiver1975
Member
Loading…
fix(installer): validate app archive before deleting installed app on update (#34669)
#41643
opened Jun 21, 2026 by
DeepDiver1975
Member
Loading…
fix(occ): don't let one broken command make occ unusable (#33895)
#41642
opened Jun 19, 2026 by
DeepDiver1975
Member
Loading…
fix(trashbin): avoid full filecache scan when restoring versions (#31682)
#41641
opened Jun 19, 2026 by
DeepDiver1975
Member
Loading…
fix(sharing): show original file owner in reshare panel
#41640
opened Jun 19, 2026 by
DeepDiver1975
Member
Loading…
chore(ci): run webUILogin acceptance test suite in CI
#41629
opened Jun 16, 2026 by
phil-davis
Contributor
•
Draft
chore(deps-dev): bump jasmine-core from 5.1.1 to 6.3.0 in /build
dependencies
javascript
#41621
opened Jun 14, 2026 by
dependabot
Bot
Loading…
fix(command): restrict allowed_classes in ClosureJob unserialize() to prevent RCE
#41583
opened Jun 5, 2026 by
DeepDiver1975
Member
Loading…
3 tasks
fix(command): restrict allowed_classes in CommandJob unserialize() to prevent RCE
#41582
opened Jun 5, 2026 by
DeepDiver1975
Member
Loading…
3 tasks
fix(files_sharing): enforce minimum search length in getUsers() and getGroups()
#41580
opened Jun 5, 2026 by
DeepDiver1975
Member
Loading…
2 tasks
fix(files_external): add SSRF host validation to external storage backend
#41581
opened Jun 5, 2026 by
DeepDiver1975
Member
Loading…
3 tasks
fix(federation): replace strcmp token oracle with hash-based comparison in requestSharedSecret
#41579
opened Jun 5, 2026 by
DeepDiver1975
Member
Loading…
3 tasks
fix(federation): remove plaintext auth token from error log in getSharedSecret
#41578
opened Jun 5, 2026 by
DeepDiver1975
Member
Loading…
2 tasks
fix(occ): prevent params command key from overriding validated allowlist command
#41577
opened Jun 5, 2026 by
DeepDiver1975
Member
Loading…
2 tasks
fix(files/storage): add SSRF host validation to DAV storage constructor
#41576
opened Jun 5, 2026 by
DeepDiver1975
Member
Loading…
3 tasks
fix(backgroundjob): restrict unserialize to prevent PHP object injection
#41568
opened May 31, 2026 by
XananasX7
Loading…
Previous Next
ProTip!
no:milestone will show everything without a milestone.