nextcloud-docker-dev icon indicating copy to clipboard operation
nextcloud-docker-dev copied to clipboard

Improve initial setup to trigger more bugs

Open juliusknorr opened this issue 2 years ago • 1 comments

As @nickvergessen mentioned there could be a couple of things to configure to trigger bugs

  • Set a displayname on the users, maybe displaynames with some xss teststrings

  • File skeleton with special characters

  • TODO: Collect more

juliusknorr avatar Nov 28 '23 10:11 juliusknorr

  • randomize darkmode setting on user creation
  • upload image avatars (still no OCC/OCS endpoint, Talk ships its own)
  • I personally use random for user id and login via configured email address
    • uuids (helps with visuals)
    • add spaces (problem in URLs, needs to be encoded)
    • numeric only (problem in arrays as keys in PHP https://3v4l.org/8dTd1 )
    • double @ user ids, e.g. break@ing@every@thing (problem with federation splitting user + domain from cloud ids)
USERID=$(uuidgen)
TEST5=$USERID
sudo -u www-data OC_PASS="123456" ./occ -vvv user:add --password-from-env --display-name "Emily Evans" -g $GROUPID1 -g $GROUPID2 $USERID
sudo -u www-data ./occ -vvv user:setting $USERID settings email [email protected]

nickvergessen avatar Nov 28 '23 11:11 nickvergessen