Timothee
1f1a2b660f
N°7581 Improve error message readability during object creation/modification in the portal (regression introduced with N°7545)
2024-06-21 12:36:52 +02:00
odain
d98e35d918
Merge branch 'support/2.7' into support/3.0
2024-05-16 14:13:24 +02:00
odain
f8b54be896
N°7426 - no session created - replace php_sapi_name() by PHP_SAPI
2024-05-16 14:10:54 +02:00
Pierre Goiffon
a337ef3d88
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# setup/modelfactory.class.inc.php
# setup/setuputils.class.inc.php
2024-03-13 09:27:06 +01:00
Pierre Goiffon
763112c179
N°7344 rest.php core/get : add try/catch around query execution ( #622 )
...
Co-authored-by: Thomas Casteleyn <thomas.casteleyn@super-visions.com >
Co-authored-by: Molkobain <lajarige.guillaume@free.fr >
2024-03-12 18:08:04 +01:00
Anne-Cath
3f3b0cbe55
Fix merge support/2.7 to support/3.0
2024-01-15 16:25:10 +01:00
Anne-Cath
dab03e5b5d
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# application/cmdbabstract.class.inc.php
2024-01-15 15:56:24 +01:00
Anne-Catherine
87582a021b
N°6993 - Error message on bulk transition on object containing a null blob ( #596 )
2024-01-15 15:49:19 +01:00
odain
83ac219ec9
Merge branch 'support/2.7' into support/3.0
2024-01-12 08:19:05 +01:00
odain-cbd
c140ebcb6b
N°7085 - Fix infinite loop in login page until fatal error occurs ( #592 )
...
* N°7085 - login page infinite loop until fatal error- add Config->AddAllowedLoginTypes
* N°7085 - reproduce issue via a test
* N°7085-fix infinite loop
* N°7085 - ci: fix config file rights in tearDown
* N°7085 - ci: fix config file rights in tearDown (again)
* N°7085 - ci: fix config file content
* N°7085 - ci : add runTestsInSeparateProcesses
* Update core/config.class.inc.php
Co-authored-by: Molkobain <lajarige.guillaume@free.fr >
* N°7085 - exit -1 + enhance log message
* PR feedbacks from Romain regarding LoginTest annotations
---------
Co-authored-by: Molkobain <lajarige.guillaume@free.fr >
2024-01-12 08:13:40 +01:00
Pierre Goiffon
a4f6f6e877
N°4368 Fix CORB blocking regression ( #598 )
...
Don't send X-Content-Type-Options HTTP header for certain WebPage impl to workaround CORB blocking
To disable globally this new behavior introduced in 9865bf07 , set the `security.enable_header_xcontent_type_options` config parameter to false
Thanks @Molkobain for the review !
2024-01-05 10:41:18 +01:00
Pierre Goiffon
4ee70cb95a
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# application/ajaxwebpage.class.inc.php
# application/csvpage.class.inc.php
# application/itopwebpage.class.inc.php
# application/webpage.class.inc.php
# application/xmlpage.class.inc.php
# datamodels/2.x/itop-hub-connector/hubconnectorpage.class.inc.php
# pages/ajax.document.php
# pages/ajax.render.php
# sources/application/TwigBase/Controller/Controller.php
# webservices/export-v2.php
2023-12-19 18:38:45 +01:00
Pierre Goiffon
9865bf0779
N°4368 add sending X-Content-Type-Options HTTP header
...
Replace in consumers the \WebPage::add_xframe_options call by \WebPage::add_http_headers
2023-12-19 18:25:26 +01:00
Pierre Goiffon
c955fe00b7
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# application/cmdbabstract.class.inc.php
# application/utils.inc.php
# core/coreexception.class.inc.php
# core/userrights.class.inc.php
# datamodels/2.x/itop-portal-base/portal/src/Form/ObjectFormManager.php
# tests/php-unit-tests/README.md
# tests/php-unit-tests/unitary-tests/core/DBObjectTest.php
2023-11-15 15:03:04 +01:00
Pierre Goiffon
5a43448644
N°6458 Security hardening
2023-11-15 11:14:07 +01:00
Romain Quetiez
29e9a06dc1
✅ Optimize tests execution time (no need for process isolation as long as we leave the premises clean)
2023-10-26 21:10:47 +02:00
Stephen Abello
fadfd94bac
Merge branch 'support/2.7' into support/3.0
2023-10-17 09:19:16 +02:00
Stephen Abello
9469681a0c
N°6777 - Security hardening
2023-10-17 09:12:40 +02:00
Pierre Goiffon
da27ddba82
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# application/utils.inc.php
# pages/ajax.render.php
2023-10-13 17:27:03 +02:00
Pierre Goiffon
c72cb7e70e
N°6606 security hardening
2023-10-13 17:15:37 +02:00
Pierre Goiffon
9df92665e0
N°6606 Backport of utils::ENUM_SANITIZATION_FILTER_* constants
...
Were introduced in 3.0.0, but not added to the support/2.7 branch
2023-10-13 17:10:35 +02:00
Molkobain
6dc6392fab
Merge remote-tracking branch 'origin/support/3.0.3' into support/3.0
2023-09-26 22:20:02 +02:00
Anne-Catherine
e793b02f8b
N°6766 - Fix dependent fields not updated due to WizardHelper.UpdateFields() being triggered too early ( #548 )
...
* N°6766 - Javascript : function WizardHelper.UpdateFields triggered to early does not update fields
* N°6766 - Code review
---------
Co-authored-by: Molkobain <lajarige.guillaume@free.fr >
2023-09-26 12:25:56 +02:00
Pierre Goiffon
f3c4fcb0f5
💡 Pages files : add depreciation version
2023-09-18 15:07:32 +02:00
Stephen Abello
343e87a8d4
N°6581 - Security hardening
2023-09-15 09:55:51 +02:00
Molkobain
ccceb870e3
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# tests/php-unit-tests/src/BaseTestCase/ItopDataTestCase.php
# tests/php-unit-tests/src/BaseTestCase/ItopTestCase.php
2023-08-10 15:53:05 +02:00
Molkobain
851ab9c356
N°6097 - Add \utils::GetDataPath() method to avoid duplicating manual path build
2023-08-10 15:45:39 +02:00
Eric Espie
829b648dd2
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
2023-07-25 17:55:45 +02:00
Eric Espie
5475b9fbbe
N°3454 - MoveToProd in 2 steps - fix utils::GetCurrentModuleName()
2023-07-25 17:44:43 +02:00
Eric Espie
6f8e7c7002
N°3454 - MoveToProd in 2 steps - fix utils::GetCurrentModuleUrl()
2023-07-25 17:20:37 +02:00
Pierre Goiffon
772368ef8a
💡 PHPDoc for object list panels
2023-07-24 15:38:57 +02:00
Stephen Abello
89145593ef
N°6552 - Security hardening
2023-07-19 09:25:48 +02:00
Eric Espie
b2e80d37dd
N°6436 - typo
2023-07-18 14:48:32 +02:00
Eric Espie
6432678de9
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# application/cmdbabstract.class.inc.php
# application/utils.inc.php
# bootstrap.inc.php
# composer.json
# core/MyHelpers.class.inc.php
# core/cmdbsource.class.inc.php
# core/config.class.inc.php
# core/dbobject.class.php
# core/kpi.class.inc.php
# core/metamodel.class.php
# lib/composer/autoload_classmap.php
# lib/composer/autoload_real.php
# lib/composer/autoload_static.php
2023-07-18 14:36:58 +02:00
Eric Espie
d388ce9a06
Merge branch 'feature/6548_Hide_DBHost_and_DBUser_in_log' into support/2.7
2023-07-18 09:17:40 +02:00
Stephen Abello
2b5973ec67
N°6436 - Integrate Performance Audit pre requisite in iTop Pro 2.7.9
2023-07-18 09:15:37 +02:00
Eric Espie
78396d8e4a
6548 - [ER] Hide DBHost and DBUser in log
2023-07-10 17:37:27 +02:00
Anne-Catherine
f47133bc28
N°6125 - Issue with GetAttributeFlags and GetInitialStateAttributeFlags within iTop 3.0.2 ( #474 )
2023-06-08 11:12:22 +02:00
Eric Espie
e76ada641f
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# application/loginbasic.class.inc.php
# application/loginexternal.class.inc.php
# application/loginform.class.inc.php
# application/loginurl.class.inc.php
# application/loginwebpage.class.inc.php
# composer.lock
# datamodels/2.x/authent-cas/src/CASLoginExtension.php
# lib/composer/autoload_real.php
# lib/composer/installed.php
# synchro/synchro_exec.php
# synchro/synchro_import.php
# tests/php-unit-tests/unitary-tests/application/utilsTest.php
2023-06-07 17:21:09 +02:00
Eric Espie
90cf7502e8
N°6358 - Login REST API
2023-06-07 10:09:30 +02:00
Eric Espie
c596fa2967
N°6358 - Login API REST
2023-06-07 09:17:24 +02:00
Eric Espie
a49025f371
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# application/utils.inc.php
2023-06-01 16:04:52 +02:00
Eric Espie
9e96ea2873
N°6350 - code hardening
2023-06-01 15:35:56 +02:00
Molkobain
e28dbebbd5
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# application/displayblock.class.inc.php
# dictionaries/en.dictionary.itop.ui.php
# dictionaries/fr.dictionary.itop.ui.php
2023-04-25 21:56:42 +02:00
Molkobain
4aff65f98b
N°6217 - Add accessiblity meta data for title on "Power menu"
2023-04-25 21:51:32 +02:00
Molkobain
8aba578cfa
Merge remote-tracking branch 'origin/support/3.0.3' into support/3.0
2023-04-25 21:05:42 +02:00
Molkobain
9d3e389011
N°6124 - Workaround performance problem on adding items to an object with an n:n relation having a large volume
2023-04-25 17:43:51 +02:00
acognet
3c94974d9d
N°541 - Dashlets: Improve readability when to much labels (pie chart) or too long labels (bar chart)
2023-04-25 12:09:11 +02:00
acognet
d6e5069dd5
N°541 - Dashlets: Improve readability when to much labels (pie chart) or too long labels (bar chart)
2023-04-24 14:26:33 +02:00
Stephen Abello
f839638e0b
N°6188 - Creation cancellation in pop-up while in edition of parent object wrongfully returns to object list
2023-04-21 16:12:37 +02:00