Molkobain
119dcf9c97
N°7730 - Rename constant as it is actually for ID and class selectors, not only IDs
2024-08-26 13:55:03 +02:00
Eric Espie
b7d14ca48e
N°7730 - code hardening
2024-08-26 13:55:03 +02:00
jf-cbd
0ee1818f12
N°7732 - CSRF protection generating error when cancelling the creation of an object
...
N°7741 - PDF export on impact analysis not working
2024-08-07 17:56:34 +02:00
jf-cbd
0d9f348e93
🎨 Reformatting log channels name
2024-07-05 12:05:51 +02:00
Molkobain
c3582f0aff
N°7552 - Fix mentions not taking triggers filter into account
2024-07-04 11:30:51 +02:00
jf-cbd
8b35679fcf
N°7124 - Security hardening
2024-07-03 15:51:43 +02:00
jf-cbd
98f946c871
N°7124 - [SECU] Cross-Site Request Forgery (CSRF) in several iTop pages (finalize implementation)
2024-07-02 17:14:55 +02:00
jf-cbd
46929ce43f
Remove header check in ajax.render.php
2024-06-07 10:03:49 +02:00
jf-cbd
9d1c66296b
N°7124 - [SECU] Cross-Site Request Forgery (CSRF) in several iTop pages
2024-06-06 17:10:49 +02:00
Eric Espie
67762458e4
Merge remote-tracking branch 'origin/support/3.1' into support/3.2
2024-05-30 12:08:11 +02:00
Eric Espie
3e3ac0d83f
N°7542 - code hardening
2024-05-30 12:04:36 +02:00
Molkobain
ad36066126
📝 Copyright year bump
2024-05-06 18:35:31 +02:00
jf-cbd
3dccf9ee3f
Merge remote-tracking branch 'refs/remotes/origin/support/3.1' into support/3.2
2024-04-30 10:57:46 +02:00
jf-cbd
02be397e8f
Merge remote-tracking branch 'refs/remotes/origin/support/3.0' into support/3.1
2024-04-30 10:57:06 +02:00
jf-cbd
61469a28b9
N°7445 - Invalid Unicode escape sequence on dashlet Header with statistics
2024-04-30 10:56:09 +02:00
jf-cbd
24cf28f09a
Merge remote-tracking branch 'refs/remotes/origin/support/3.1' into support/3.2
2024-04-30 08:15:15 +02:00
jf-cbd
9ff54cead8
Merge remote-tracking branch 'refs/remotes/origin/support/3.0' into support/3.1
2024-04-30 08:14:11 +02:00
jf-cbd
dbcbb187b2
N°7445 - Invalid Unicode escape sequence on dashlet Header with statistics
2024-04-30 08:13:37 +02:00
jf-cbd
71b4d672d4
Merge remote-tracking branch 'refs/remotes/origin/support/3.0' into support/3.1
...
# Conflicts:
# pages/ajax.render.php
2024-04-30 08:04:45 +02:00
jf-cbd
93bba66323
N°7445 - Invalid Unicode escape sequence on dashlet Header with statistics
2024-04-30 08:03:14 +02:00
jf-cbd
e3173810fd
Merge branch 'refs/heads/support/3.1' into support/3.2
...
# Conflicts:
# pages/ajax.render.php
2024-04-19 15:30:48 +02:00
jf-cbd
3b7f26d794
Revert "Merge branch 'refs/heads/support/3.1' into support/3.2"
...
This reverts commit 6ff60080a19d195d6fa0
2024-04-19 15:26:15 +02:00
jf-cbd
7fba61ff35
N°7445 - Invalid Unicode escape sequence on dashlet Header with statistics
2024-04-19 15:21:48 +02:00
jf-cbd
1bf156bdda
Revert "Merge branch 'refs/heads/support/3.0' into support/3.1"
...
This reverts commit 1164e757de1235452a1b
2024-04-19 15:16:57 +02:00
jf-cbd
514e0b80a5
N°7445 - Invalid Unicode escape sequence on dashlet Header with statistics
2024-04-19 11:17:09 +02:00
Pierre Goiffon
4ee70cb95a
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# application/ajaxwebpage.class.inc.php
# application/csvpage.class.inc.php
# application/itopwebpage.class.inc.php
# application/webpage.class.inc.php
# application/xmlpage.class.inc.php
# datamodels/2.x/itop-hub-connector/hubconnectorpage.class.inc.php
# pages/ajax.document.php
# pages/ajax.render.php
# sources/application/TwigBase/Controller/Controller.php
# webservices/export-v2.php
2023-12-19 18:38:45 +01:00
Pierre Goiffon
9865bf0779
N°4368 add sending X-Content-Type-Options HTTP header
...
Replace in consumers the \WebPage::add_xframe_options call by \WebPage::add_http_headers
2023-12-19 18:25:26 +01:00
Pierre Goiffon
da27ddba82
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# application/utils.inc.php
# pages/ajax.render.php
2023-10-13 17:27:03 +02:00
Pierre Goiffon
c72cb7e70e
N°6606 security hardening
2023-10-13 17:15:37 +02:00
Stephen Abello
3647291475
N°6778 - Security hardening
2023-10-02 15:06:17 +02:00
Molkobain
6dc6392fab
Merge remote-tracking branch 'origin/support/3.0.3' into support/3.0
2023-09-26 22:20:02 +02:00
Anne-Catherine
e793b02f8b
N°6766 - Fix dependent fields not updated due to WizardHelper.UpdateFields() being triggered too early ( #548 )
...
* N°6766 - Javascript : function WizardHelper.UpdateFields triggered to early does not update fields
* N°6766 - Code review
---------
Co-authored-by: Molkobain <lajarige.guillaume@free.fr >
2023-09-26 12:25:56 +02:00
acognet
e86309669e
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# pages/ajax.render.php
2023-08-31 15:56:16 +02:00
Anne-Catherine
bf768311c2
N°5136 - "Select All objects" add obsolete objects even if the parameter show obsolete data is not activated ( #467 )
2023-08-31 15:13:20 +02:00
Denis
93c0b98eb7
N°5922 - Fix plus button semantic on ext. key widget ( #448 )
...
* N°5922 - Enhance plus button on extkeywidget
* Properly reset the target class when closing the dialog
* Make icon buttons as actual clickable links for BeHat
* Apply suggestions from code review
Review by Guillaume. Thanks!
Co-authored-by: Molkobain <lajarige.guillaume@free.fr >
2023-03-03 14:20:38 +01:00
Pierre Goiffon
5efd45eafc
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# pages/ajax.render.php
2022-11-29 18:18:24 +01:00
Pierre Goiffon
d412a52fcc
N°4449 Fix FPD in dashboard export/import
2022-11-29 18:10:17 +01:00
Eric Espie
e4884470ad
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
2022-11-16 09:38:31 +01:00
Eric Espie
68d44fa981
N°5724 - code hardening
2022-11-16 09:32:47 +01:00
Molkobain
c5d5379c49
N°5408 - Mentions: Fix empty results for class with no image attribute
2022-08-16 14:21:28 +02:00
Anne-Catherine
47becb3be8
N°5024 - Missing result in search widget for external key ( #327 )
...
* N°5024 - Missing result in search widget for external key
2022-08-12 18:23:29 +02:00
Benjamin Dalsass
f0b94dd0f7
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# core/config.class.inc.php
# datamodels/2.x/installation.xml
# datamodels/2.x/itop-oauth-client/assets/img/icons8-adjust.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-administrative-tools.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-application-window.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-apps-tab.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-archive-folder.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-audit.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-automatic.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-bandage.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-book-error.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-calendar.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-cassette.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-change-approved.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-change-emergency.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-change-normal.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-change-routine.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-change.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-checkmark.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-cloud-file.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-conflict.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-contract.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-customer.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-database-custom.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-database.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-delete.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-department.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-desktop.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-discussion-forum.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-documents.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-electrical.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-electricity.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-electronics.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-enclosure-for-servers.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-export-csv.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-faq.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-farm.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-file.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-globe-cable.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-globe-fiber.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-globe-wire.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-hdd.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-hierarchy.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-hypervisor.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-import-csv.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-important-book.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-in-transit.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-laptop.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-licence.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-map-as-drive.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-map-marker.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-mobile.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-music-robot.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-nas.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-network.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-new-item.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-note.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-office-phone.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-old-vmware-logo.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-organization.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-person-female.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-phone.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-plug-socket.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-power-plant.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-print.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-process-improvement.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-puzzle.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-rack.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-server-custom.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-server-storage.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-server.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-service.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-services.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-smartphone-tablet.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-software-instance.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-software-license.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-software-other.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-software.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-solve.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-stack.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-switch-san.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-switch.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-tape-library.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-tasklist.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-team.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-telephone.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-time-limit.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-virtual-machine.svg
# datamodels/2.x/itop-oauth-client/assets/img/icons8-web.svg
# datamodels/2.x/itop-welcome-itil/datamodel.itop-welcome-itil.xml
# dictionaries/cs.dictionary.itop.ui.php
# dictionaries/da.dictionary.itop.ui.php
# dictionaries/de.dictionary.itop.ui.php
# dictionaries/en.dictionary.itop.ui.php
# dictionaries/es_cr.dictionary.itop.ui.php
# dictionaries/fr.dictionary.itop.ui.php
# dictionaries/hu.dictionary.itop.ui.php
# dictionaries/it.dictionary.itop.ui.php
# dictionaries/ja.dictionary.itop.ui.php
# dictionaries/nl.dictionary.itop.ui.php
# dictionaries/pt_br.dictionary.itop.ui.php
# dictionaries/ru.dictionary.itop.ui.php
# dictionaries/sk.dictionary.itop.ui.php
# dictionaries/tr.dictionary.itop.ui.php
# dictionaries/zh_cn.dictionary.itop.ui.php
# js/wizardhelper.js
# lib/composer/autoload_classmap.php
# lib/composer/autoload_real.php
# lib/composer/autoload_static.php
# templates/pages/backoffice/oauth/Wizard.html.twig
2022-06-27 08:11:28 +02:00
acognet
ec86bd246a
N°5129 - Unwanted popup during a transition with an AttributeExternalField
2022-06-21 15:24:25 +02:00
Benjamin Dalsass
5574eabfed
N°4899 Adjust url sanitizer for 3.0 compliance
2022-05-18 10:49:23 +02:00
Benjamin Dalsass
87f606f768
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# application/dashlet.class.inc.php
# pages/ajax.render.php
# pages/csvimport.php
# test/phpunit.xml.dist
2022-05-18 10:38:50 +02:00
Benjamin Dalsass
8e97279401
N°4899 - Reflected XSS on revert_dashboard operation
2022-05-17 09:27:06 +02:00
Pierre Goiffon
f4a027b474
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# composer.json
# core/cmdbchangeop.class.inc.php
# core/cmdbobject.class.inc.php
# css/light-grey.scss
# setup/setuputils.class.inc.php
# test/ItopTestCase.php
# test/core/ConfigTest.php
# test/core/LogAPITest.php
# test/core/UserRightsTest.php
# test/core/dictApcuTest.php
# test/core/dictTest.php
# test/core/iTopConfigParserTest.php
# test/core/ormLinkSetTest.php
# test/phpunit.xml.dist
# test/postbuild_integration.xml.dist
# test/setup/SetupUtilsTest.php
# test/status/StatusIncTest.php
# webservices/cron.php
2022-04-22 15:26:18 +02:00
Molkobain
b03e28efb9
N°4966 - Code cleanup
2022-04-19 12:13:14 +02:00
acognet
6fa2d47780
N°4538 - Dashlet Groupby on ExternalKey with special character, bad display
2022-04-15 10:03:04 +02:00
acognet
079b406f18
N°4966 - No more custom dashboard switch
2022-04-15 09:54:41 +02:00
