Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions admin_manual/release_notes/upgrade_to_30.rst
Original file line number Diff line number Diff line change
Expand Up @@ -36,3 +36,8 @@ Automated clean-up of app password
----------------------------------

Nextcloud 30 will :ref:`clean-up unused app passwords<authentication-app-password-clean-up>`.

Monitoring: Counting of active users
------------------------------------

Starting with Nextcloud 30.0.12 the monitoring app was adjusted to count the active users in the same way as occ user:report and the support app.
5 changes: 5 additions & 0 deletions admin_manual/release_notes/upgrade_to_31.rst
Original file line number Diff line number Diff line change
Expand Up @@ -38,3 +38,8 @@ Previously it was set to 10MiB, it is now increased to 100MiB.
Also the configuration was moved from an app configuration to the system configuration (``config.php``).
If you set up a custom value previously the value will be automatically migrated to the system configuration during the update.
But if you need to set a new custom value you need now to use the system configuration, see also :ref:`files_configure_max_chunk_size`.

Monitoring: Counting of active users
------------------------------------

Starting with Nextcloud 31.0.6 the monitoring app was adjusted to count the active users in the same way as occ user:report and the support app.
5 changes: 5 additions & 0 deletions admin_manual/release_notes/upgrade_to_32.rst
Original file line number Diff line number Diff line change
Expand Up @@ -14,3 +14,8 @@ Web server configuration
* Setup checks do not check for the ``X-XSS-Protection`` response header anymore. It has been removed from Nextcloud's ``.htaccess`` and you may want to adjust your webserver config to not serve it anymore.
XSS filtering was supported only until Chromium 78 and similarly old browsers, but had been found to cause more issues, including attack vectors, than it solved.
Nowadays, aside of not serving the header at all, the only generally recommended value is ``0``. More context can be found in the `OWASP Cheat Sheet Series <https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html#x-xss-protection>`_.

Monitoring: Counting of active users
------------------------------------

The monitoring app was adjusted to count the active users in the same way as occ user:report and the support app.