Commit Graph

3012 Commits

Author SHA1 Message Date
Romain Quetiez
9f1338ee2a #1130 CAS authentication security leak when cas_memberof is left empty
SVN:2.1.0[3684]
2015-08-18 13:42:47 +00:00
Denis Flaven
96c8ee5e4d Retrofit of file based "transactions" as an alternative to session based ones.
SVN:2.1.0[3669]
2015-08-05 14:12:34 +00:00
Denis Flaven
8e863d4890 Fixed a potential XSS vulnerability.
SVN:2.1.0[3664]
2015-07-30 09:12:42 +00:00
Denis Flaven
cd769d5e49 Bug fix: typo causing the generation of invalid SQL queries (in some rare cases). - fix for the 2.1.0 branch.
SVN:2.1.0[3654]
2015-07-28 12:29:03 +00:00
Denis Flaven
04677fc2c7 Better error reporting (thanks to Stefan Goethals for suggesting it).
SVN:2.1.0[3624]
2015-07-06 17:07:07 +00:00
Denis Flaven
ed6a464d8b Bug fix: don't accept attachments (like images) via Chrome's copy/paste since it may duplicate the text content of a normal copy/paste and moreover causes troubles because there is no file name associated with the pasted content.
SVN:2.1.0[3622]
2015-07-06 14:33:21 +00:00
Denis Flaven
5794f7d1ca #1107: Make sure that all settings are preserved upon update.
SVN:2.1.0[3614]
2015-07-01 08:43:10 +00:00
Denis Flaven
7d42aa48cd Bug fix: make Excel export work on results of the global search.
SVN:2.1.0[3603]
2015-06-22 10:03:30 +00:00
Denis Flaven
614dd21aa9 Added an alternate implementation for storing "transaction" identifiers on disk instead of inside the $_SESSION variable.
SVN:2.1.0[3599]
2015-06-20 13:40:17 +00:00
Denis Flaven
706e6c56ff Mutex instrumentation for troubleshooting...
SVN:2.1.0[3596]
2015-06-19 14:48:13 +00:00
Romain Quetiez
f048c6cb1f JSON/REST: When specifying a case log entry (or the whole), it was not possible to set the user name without knowing a valid user id -retrofit from trunk
SVN:2.1.0[3594]
2015-06-16 09:51:51 +00:00
Romain Quetiez
1804903ee4 Make sure that the SQL mutexes are specific to the current iTop instance, but still preserving the capability for the setup to detect an already running cron job with or without a valid config file -reintegrated from trunk
SVN:2.1.0[3592]
2015-06-15 09:55:31 +00:00
Denis Flaven
17a8a896dc Bug fix: do NOT display the call stack in case of error/exception since it may contain sensitive information.
SVN:2.1.0[3589]
2015-06-05 13:52:07 +00:00
Romain Quetiez
ed85260bb3 Implemented GetForJSON and FromJSONToValue for AttributeLinkedSet (though this is not used for the Rest/JSON services which are doing much more)
SVN:2.1.0[3586]
2015-05-26 11:56:14 +00:00
Romain Quetiez
3c7fac7504 Make it possible to overload RestUtils (static methods called with static:: instead of self::) - iTop NOW REQUIRES PHP 5.3: we have verified, there are very installations of iTop made on PHP 5.2. It is worth to note that PHP 5.3 is already end of life (5.4 will become end of life in 8 months) -retrofit from trunk
SVN:2.1.0[3585]
2015-05-26 11:46:49 +00:00
Romain Quetiez
93feb700e8 ormStopWatch::GetElapsedTime not working in case of queries containing :this-> parameters (the prototype of GetElapsedTime has changed and is NOT compatible with the previous one) -reintegrated from trunk
SVN:2.1.0[3565]
2015-04-27 09:27:00 +00:00
Denis Flaven
48456082a9 Bug fix: prevent a crash of the web services when trying to log a non scalar paramater value...
SVN:2.1.0[3551]
2015-04-16 15:36:09 +00:00
Romain Quetiez
fbc0456496 Modules implementing a lifecycle written in PHP (and having actions executed on transitions) do not work until 2.1.0. The compatibility patch had been implemented but it was not working. Retrofitted from trunk
SVN:2.1.0[3548]
2015-04-16 13:53:02 +00:00
Denis Flaven
0fc3ee12b1 #1088: support of HTMLEditor in the PortalWebPage, for example if the description of a ticket is in HTML.
SVN:2.1.0[3540]
2015-04-07 15:56:16 +00:00
Denis Flaven
ce5f8c93cd Bug fix: properly compute the URLs/URIs for the soap server (and its extensions)
SVN:2.1.0[3537]
2015-04-07 09:59:53 +00:00
Denis Flaven
b38eb97323 Enhancement: allow the API to create entries with a specified user_login.
SVN:2.1.0[3516]
2015-03-24 17:09:51 +00:00
Denis Flaven
e6eb32cd21 #594: properly display attachments inside "properties" by closing the span and the fieldset in non-edit mode.
SVN:2.1.0[3512]
2015-03-23 17:56:40 +00:00
Denis Flaven
c2429f2d05 - Properly handle "suggested" attachments
- Properly pass the name of the uploaded file to the internal JS event

SVN:2.1.0[3497]
2015-02-12 18:03:36 +00:00
Romain Quetiez
4e4f2b4db9 #1060 Internal: improved the symptoms when calling MetaModel::GetAttributeDef with an invalid attribute code (feedback on the class name and no more FATAL errors) -retrofit from trunk
SVN:2.1.0[3493]
2015-02-09 13:15:21 +00:00
Romain Quetiez
2d7f963316 Branching on the revision used to build the official release 2.1.0
SVN:2.1.0[3485]
2015-01-06 08:57:15 +00:00
Denis Flaven
546d181ea9 Addition of the Danish localization contributed by Erik Bøg
SVN:trunk[3480]
2014-12-18 08:56:23 +00:00
Denis Flaven
143cefe4e3 #1041 Protect against some XSS injections
SVN:trunk[3479]
2014-12-18 08:50:04 +00:00
Romain Quetiez
ece152173f Advanced customization: a stop watch can be started in the past (incident ticket created from an alarm)
SVN:trunk[3478]
2014-12-18 08:37:00 +00:00
Denis Flaven
b08de31b3c Prevent duplicate declaration of the "Data Admin" menu (both in XML and PHP) which makes it impossible to customize.
SVN:trunk[3477]
2014-12-17 17:40:01 +00:00
Denis Flaven
0f967a41df Prevent a PHP crash when the icon tag is missing from a highlight_code definition in the XML.
SVN:trunk[3476]
2014-12-17 17:27:24 +00:00
Romain Quetiez
4c3bf70cc4 Completing [3423]: Problem/ev_assign still invoking the legacy verb SetAssignedDate
SVN:trunk[3475]
2014-12-17 08:55:02 +00:00
Romain Quetiez
35dd3f9610 The very final version (removed a misleading header in the readme file)
SVN:trunk[3473]
2014-12-16 15:13:09 +00:00
Romain Quetiez
a7f7424e54 #1039 Continuation of the fix implemented in [3465] that introduced a stopper regression (Fatal Error)
SVN:trunk[3472]
2014-12-16 13:54:40 +00:00
Denis Flaven
83e2974b10 #1040 Graphical display of "impact/depends on" is not consistent with the "list" tab
SVN:trunk[3471]
2014-12-16 13:40:51 +00:00
Romain Quetiez
715ba066d3 Adjusted dictionary entries (meta information about the lifecycle actions)
SVN:trunk[3470]
2014-12-16 09:02:03 +00:00
Romain Quetiez
9502003ff4 Updated the readme file with the latest changes
SVN:trunk[3469]
2014-12-15 16:11:15 +00:00
Romain Quetiez
57c827bb1a Updated the readme file with the latest changes
SVN:trunk[3468]
2014-12-15 16:08:50 +00:00
Denis Flaven
690ac9be75 #1038: dictionary cleanup to avoid misleading/duplicate names when importing Service Subcategories.
SVN:trunk[3467]
2014-12-15 16:08:10 +00:00
Romain Quetiez
4c3c31c44d Injectable methods: labels/descriptions given in the dictionary
SVN:trunk[3466]
2014-12-15 15:49:44 +00:00
Denis Flaven
3c9ace5b53 #1039: prevent concurrent executions of either synchro_import.php or synchro_exec.php for a given data source, since it would lead to unpredictable results.
SVN:trunk[3465]
2014-12-15 15:04:43 +00:00
Denis Flaven
bd5268dc42 Addition of the Ducth translation, thanks to Remie Malik.
SVN:trunk[3464]
2014-12-15 14:34:34 +00:00
Denis Flaven
133b6d4d29 #1037: refresh "priority" when either "impact" or "urgency" changes.
SVN:trunk[3463]
2014-12-15 14:09:17 +00:00
Denis Flaven
fba3990c61 - Proper handling of the validation hierarchy in property sheets.
- Correct behavior for animated submits...

SVN:trunk[3462]
2014-12-12 16:38:17 +00:00
Romain Quetiez
53e997cfba Instrumented Model Factory with means to keep track of touched nodes
SVN:trunk[3461]
2014-12-12 12:17:43 +00:00
Denis Flaven
e738ba35b7 The FormSelectorField now has its own widget to properly cope with its "subfields" in "property sheet" mode (continued).
SVN:trunk[3460]
2014-12-10 17:11:45 +00:00
Romain Quetiez
0773455ebc Cosmetics on the module names (consistency)
SVN:trunk[3459]
2014-12-10 10:48:47 +00:00
Denis Flaven
cafc6a8baf The FormSelectorField now has its own widget to properly cope with its "subfields" in "property sheet" mode.
SVN:trunk[3458]
2014-12-10 10:44:26 +00:00
Romain Quetiez
48f222df0b When adding a case log, existing objects could not be displayed anymore!
SVN:trunk[3457]
2014-12-09 16:07:06 +00:00
Denis Flaven
88726a0634 Support for some (optional) feedback during submit.
SVN:trunk[3456]
2014-12-08 13:19:09 +00:00
Denis Flaven
0ac522fc4c Support for some (optional) feedback during uploads.
SVN:trunk[3455]
2014-12-08 13:18:06 +00:00