LDAP: fetch email from LDAP on userExists check as well (along to Quota and Avatar)
Merge pull request #8166 from owncloud/ldap_update_email

Also check for email address on userExists (next to Avatar and Quota)
Remove limit and offset manipulation when getting users or groups, because it does not work when more than one user or group backend. Fixing it would be too costly performancewise, so we switch back to the model used in OC 5: limit and offset are effective per backend, and not a general constraint
adjust tests accordingly
Backport of PR #7815, correct LDAP user count on setup with many users
(occ user:report)

LDAP: make sure cache key for paged result cookie matches when limit or offset is null or 0

LDAP: fix user report i.e. count for LDAP servers with really many users

initialize variable

var count is assigned in the inner loop so it must be checked inside there to be properly used as part of the exit condition of the outer loop

Put inner loop into own method, let's see whether it makes scrutinizer happier
LDAP: cache display names immediately on retrieval, saves tens of unecessary queries to LDAP server in the share dialog for example
add additional comments, PHPdoc and check whether it's really applicable
Verify that a file exists before we share it
Use JS as content-type due to mimesniffing
Backport of #7682 to stable6
Backport of #8183 to stable6

Some headers were currently only added to the templates but not to
other components (e.g. SabreDAV / JSON / etc...)
The migration to base.php ensures that the headers are served to all
requests passing base.php
Backport of #8197 to stable6

This extends mimetypes.list.php to be a white-list of known secure mime
types as well as offering secure alternatives for know potentially
malicious mime types.
I kept this in the OC_Helper and OC\Files\Type\Detection classes as
each backend has its own way of detecting mime types.

This supersedes #8184 as discussed in owncloud/security-tracker#56
Merge pull request #8259 from owncloud/backport-7682-6

Backport #7682
Correctly process request parameters other than GET or POST, dont use globals in the class but inject it
default to GET request when no method is set to fix unittests, also set parsed json parameters on the post attribute
merge dicontainer
use references for middleware to fix problems on 5.3
merge middleware string registration
Merge pull request #8265 from owncloud/appframework-fix-backports

Appframework fix backports
Merge pull request #8232 from owncloud/fix_8135

LDAP: optimize retrieval of displaynames, fixes #8135