Pierre Goiffon
97d6d413bb
N°4502 Fix dashboard page not refreshed after saving customm dashboard
2021-12-10 12:30:33 +01:00
Pierre Goiffon
3f8f57fa9a
N°4502 Fix cannot create new or edit existing custom dashboard
...
Regression brought by dbaf9241
2021-12-10 09:15:43 +01:00
Pierre Goiffon
84426c6634
N°4365 Security hardening
2021-11-17 10:15:12 +01:00
Pierre Goiffon
dbaf924171
N°4363 Security hardening
2021-11-16 17:19:19 +01:00
Pierre Goiffon
2beb795f9a
N°4304 Security hardening
2021-11-09 11:32:53 +01:00
Molkobain
92a9a8c65f
N°4129 - Security hardening
2021-08-18 15:57:18 +02:00
Eric
86f649affc
N°4002 - code hardening
2021-05-27 16:13:27 +02:00
Eric
4f5c987d8b
N°4002 - code hardening
2021-05-27 15:57:04 +02:00
Pierre Goiffon
b9ca2ac13d
N°3416 Fix DocumentFile preview not working anymore
...
Was caused by X-Frame-Options http header added with N°3317
(cherry picked from commit 35d77ff642
2020-12-03 08:20:51 +01:00
Pierre Goiffon
1551694198
N°3317 Security hardening
2020-10-05 14:42:03 +02:00
Eric
bef1832ac7
N°3317 - Add http headers
2020-09-29 14:07:24 +02:00
Pierre Goiffon
3c9318d56a
N°2990 Fix count warning on audit OQL error
2020-05-12 09:41:24 +02:00
Pierre Goiffon
30d10b6f11
N°2990 Security hardening
2020-05-12 09:40:58 +02:00
Eric
b88b9dabdb
N°2919 - Dashboard - Fix dashboard not saved
...
The sanitization was too strong. Some names can contain ':'
2020-04-09 17:59:52 +02:00
Stephen Abello
4b7f736af0
N°2755 - Security hardening
2020-04-06 09:42:41 +02:00
Stephen Abello
016fbaed36
N°2755 - Security hardening
2020-04-06 09:42:15 +02:00
Stephen Abello
bfcd137e52
N°2853 - Security hardening
...
(cherry picked from commit d01caaf4e4
2020-04-06 09:37:58 +02:00
Molkobain
17df9d0f9d
Merge remote-tracking branch 'origin/support/2.5'
2019-06-21 10:03:17 +02:00
Molkobain
93099ea3c7
N°2323.5 Fix regression introduced in previous commit
...
Could not upload images in HTML field anymore
2019-06-21 10:01:31 +02:00
Eric
5102b113ed
N°2323 - Fix calls to ajax endpoints
...
(cherry picked from commit c723d19e01
2019-06-18 10:45:50 +02:00
Eric
c723d19e01
N°2323 - Fix calls to ajax endpoints
2019-06-17 15:59:43 +02:00
Pierre Goiffon
0f3347f64d
📝 Fix some PhpDoc
2019-06-12 10:39:30 +02:00
Eric
1e92c2f28a
Sanitize error message
2019-06-11 17:18:36 +02:00
Eric
e4b097b196
Add KPIs to search
2019-06-11 17:18:35 +02:00
Stephen Abello
da5d8b20fa
N°2044: Enable Search form prefill when adding objects to 1:n
2019-06-11 16:59:27 +02:00
Stephen Abello
7c1290f684
N°2044: Enable Search form prefill when adding objects to 1:n
2019-06-04 11:18:30 +02:00
Pierre Goiffon
12c916f4e5
📝 Add @var for iApplicationUIExtension loops
2019-05-28 17:16:02 +02:00
Pierre Goiffon
6159ab33b7
🔊 DBSearch ajax update : better handling of invalid queries
2019-05-02 17:33:41 +02:00
Eric
ddd9188eb7
Fix non-existing variable
2019-02-26 15:24:15 +01:00
Eric
48f15d7781
N°1974 - Fix: Stimuli can be applied through URL even if the access rights are set to deny
2019-02-20 16:11:49 +01:00
Molkobain
4508b9d7d5
N°1758 Fix read only attributes on bulk apply stimulus
...
(cherry picked from commit 7e3fceb7dc
2019-01-22 16:35:22 +01:00
Eric
bc5643707e
N°1898 - Fix pagination issue for search with accent
2018-12-21 10:04:04 +01:00
Eric
a45e543eac
N°1898 - Fix pagination issue for search with accent
2018-12-21 09:36:28 +01:00
Molkobain
daafa9123c
N°1852 Fix loss of inline images and attachments when user has been logged off
2018-12-13 11:35:00 +01:00
Molkobain
5a1b6e43c9
N°1835 Internal: Fix regression introduced by commit 36d47c2
2018-12-13 11:18:25 +01:00
Molkobain
4a99ed2ad8
N°1835 Internal: Fix regression introduced by commit 36d47c2
2018-12-12 19:51:06 +01:00
Pierre Goiffon
45910dc115
Merge remote-tracking branch 'origin/support/2.5' into release/2.6
...
# Conflicts:
# datamodels/2.x/itop-config-mgmt/zh.dict.itop-config-mgmt.php
# dictionaries/zh.dictionary.itop.ui.php
2018-12-11 17:23:34 +01:00
Pierre Goiffon
52ac819c1f
N°1835 wooops fix previous commit
2018-12-11 10:25:48 +01:00
Pierre Goiffon
c4ba1d55ac
🔊 N°1835 log error when transaction_id invalid in UI.php
2018-12-11 10:09:50 +01:00
Pierre Goiffon
36d47c2274
N°1835 fix transaction_id lost with session
...
* transaction_id are now stored by default in file instead of session ("transaction_storage" config parameter : default value was 'Session', it is now 'File')
* session_regenerate_id() call can be disabled using "regenerate_session_id_enabled" config parameter
* new 'transaction_id' parameter type to allow dots (with a file storage, transaction_id equals the temp file name and on Windows we're getting *.tmp)
2018-12-10 17:39:07 +01:00
Stephen Abello
fb028710e0
Datamodel viewer: Fix an issue where OQL Filters were truncated
2018-12-10 15:10:58 +01:00
Eric
e4e5f627c4
Display error log if UpdateObjectFromPostedForm fails when modifying an object in console
2018-12-05 09:04:30 +01:00
Eric
aca11ac966
Fix AttributeSet wrong error on number of tags in creation
2018-12-03 11:01:54 +01:00
Pierre Goiffon
5309aa225a
Merge remote-tracking branch 'origin/support/2.5' into release/2.6
...
# Conflicts:
# application/utils.inc.php
# js/dashboard.js
# pages/ajax.render.php
2018-11-26 18:28:42 +01:00
Pierre Goiffon
0f20f9ca5d
🔒 N°1795 prevent CSRF on dashboard import
2018-11-26 15:17:53 +01:00
Pierre Goiffon
d5568afc68
🔒 N°1795 prevent XSS on some fields
2018-11-23 18:00:26 +01:00
Denis Flaven
5ccfa24b27
iTop Newsroom implementation - painfully merged manually...
2018-11-21 19:36:51 +01:00
Pierre Goiffon
a659de9c9b
Merge remote-tracking branch 'origin/support/2.5' into release/2.6
...
# Conflicts:
# datamodels/2.x/itop-portal-base/portal/src/controllers/browsebrickcontroller.class.inc.php
2018-11-21 18:14:13 +01:00
Molkobain
3aed65c921
(cherry picked from 854bb81) N°1779 Fix none draggable columns in exports (Excel, CSV, ...)
...
- Fix AjaxWebPage load of linked stylesheets
- Remove unnecessary imports of JS/CSS files
2018-11-21 16:13:11 +01:00
Molkobain
c300e46480
N°1779 Fix none draggable columns in exports (Excel, CSV, ...)
...
- Fix AjaxWebPage load of linked stylesheets
- Remove unnecessary imports of JS/CSS files
2018-11-21 15:55:45 +01:00
