Fixes#3722
Use @microsoft.graph.downloadUrl for OneDrive file access and
fall back to the /content redirect when needed.
Reuse cached download URLs when available, and update the cache
only when a full stat entry already exists.
- refresh CSRF TTL after successful open/info/protected commands
- extend token lifetime on open requests during normal navigation
- limit CSRF protection to stable write commands
- fix callback script syntax in OAuth popup handling
- issue CSRF token on open init response
- send token via custom request header
- validate token for protected write commands
- refresh token TTL on info reload and valid protected requests
- return csrfReload marker on 403 to trigger background token refresh
- suppress duplicate CSRF refresh requests on the client
* Refactor touch event binding in elfinder.js (#3762)
for jquery 4.0
* Refactor name trimming in elFinder.resources.js (#3763)
for jquery 4.0
* Replace jQuery methods with native JavaScript equivalents (#3764)
for jquery 4.0
* Refactor command binding to use bind method (#3765)
for jquery 4.0
* Refactor search input value handling and buttonset (#3766)
for jquery 4.0
* Refactor function calls to use bind instead of proxy (#3767)
for jquery 4.0
* Refactor text trimming method in parseUploadData (#3768)
for jquery 4.0
* Fix mime trimming and whitespace handling (#3769)
for jquery 4.0
* Refactor value trimming to use native trim method (#3772)
for jquery 4.0
* Fix binding of 'make' method in mkfile.js (#3773)
for jquery 4.0
* Fix binding of make function in mkdir command (#3774)
for jquery 4.0
* Fix string trimming for translator names (#3775)
for jquery 4.0
* Fix binding of mixin make function in edit.js (#3776)
For jquery 4
* Refactor permission value trimming method (#3777)
For jquery 4.0
* fix: to support jQuery 4.0.0
* update: use jQuery 4.0.0/jQueyUI 1.14.2
---------
Co-authored-by: Brian Stone <brianstone@hotmail.com.au>
trim($this->root, '/') strips the leading slash from the root path,
making strlen() return a value 1 less than expected. This causes
substr() to include an extra character from the root folder name
in the relative path.
For example, with root folder "images":
- Expected URL: /files/image.jpg
- Actual URL: /files/s/image.jpg
Using strlen($this->root) + 1 is consistent with other URL
construction methods in elFinderVolumeLocalFileSystem (lines 206,
612, 845, 1420) which all use this correct pattern.
Fixes#3746
Sometimes uploading large files fails with the following error: Unsupported operand types: string + int {"userId":2,"exception":"[object] (TypeError(code: 0): Unsupported operand types: string + int at <path>/vendor/studio-42/elfinder/php/elFinder.php:4476).
The function file_get_contents returns a string, and PHP 8 doesn't do implicit conversion. It requires the conversion to be explicit to not give problems.
nao-pon