Pierre Goiffon
e007e09155
Merge remote-tracking branch 'origin/support/3.0' into support/3.1
...
# Conflicts:
# pages/ajax.render.php
2023-12-19 18:41:57 +01:00
Pierre Goiffon
4ee70cb95a
Merge remote-tracking branch 'origin/support/2.7' into support/3.0
...
# Conflicts:
# application/ajaxwebpage.class.inc.php
# application/csvpage.class.inc.php
# application/itopwebpage.class.inc.php
# application/webpage.class.inc.php
# application/xmlpage.class.inc.php
# datamodels/2.x/itop-hub-connector/hubconnectorpage.class.inc.php
# pages/ajax.document.php
# pages/ajax.render.php
# sources/application/TwigBase/Controller/Controller.php
# webservices/export-v2.php
2023-12-19 18:38:45 +01:00
Pierre Goiffon
9865bf0779
N°4368 add sending X-Content-Type-Options HTTP header
...
Replace in consumers the \WebPage::add_xframe_options call by \WebPage::add_http_headers
2023-12-19 18:25:26 +01:00
Eric Espie
c3469e43bc
N°6408 - Add logs, changed modification test of current object and prevent calling OnDBUpdate() when object is not modified
2023-06-23 17:02:31 +02:00
Molkobain
c767ebe989
📝 Copyright year bump
2023-03-17 18:28:47 +01:00
acognet
7ec12f1e12
N°4517 - PHP 8.1: Replace htmlentities(***, ENT_QUOTES, 'UTF-8') with utils::EscapeHtml
2022-07-01 09:22:25 +02:00
Molkobain
8dd96ea636
Copyright year bump
2021-03-15 09:29:45 +01:00
Eric
622b486d1f
N°3785 - Use DownloadPage to download documents
2021-03-04 16:37:33 +01:00
Eric
26f800d488
N°3423 - Allow AttributeImage / AttributeDocument content to be cached by the browser (console)
2021-01-21 10:44:23 +01:00
Pierre Goiffon
96e7f57a34
Merge remote-tracking branch 'origin/support/2.7' into develop
...
# Conflicts:
# application/ajaxwebpage.class.inc.php
# application/csvpage.class.inc.php
# application/itopwebpage.class.inc.php
# application/webpage.class.inc.php
# application/xmlpage.class.inc.php
# core/config.class.inc.php
# css/css-variables.scss
# datamodels/2.x/version.xml
# pages/ajax.document.php
# pages/ajax.render.php
# pages/ajax.searchform.php
# sources/application/TwigBase/Controller/Controller.php
2020-12-10 18:08:11 +01:00
Pierre Goiffon
1304e2eb2d
N°3416 Updates after code review v2 :)
2020-12-04 08:51:07 +01:00
Pierre Goiffon
cece15d10c
N°3416 Updates after code review
...
Many thanks @bruno-ds !
* add comments to explain intentions
* fix indentations
2020-12-03 17:45:44 +01:00
Pierre Goiffon
ecebe4ecd5
N°3416 XFrame and cache headers optimizations
...
* Remove XFrame header set in \WebPage::no_cache : not this method responsability, was confusing :/
* Remove no_cache() calls when already set in page constructor (ajax_page mainly)
* Also calls everywhere the \WebPage::no_cache method instead of setting headers manually
2020-12-02 17:19:05 +01:00
Pierre Goiffon
8bfcb14d0c
N°3416 XFrame-Options header is now set using a config parameter, defaults to SAMEORIGIN
...
Also adds an indirection (\WebPage::add_xframe_options) to set header
2020-12-02 17:17:11 +01:00
Eric
9cd719ab56
N°2847 - Separate inline scripts and css from html in the rendering of pages
2020-09-18 18:16:09 +02:00
Eric
410a637598
N°2847 - Tab Management - iTop Pages refactoring - introduction of UIContentBlock as base block
2020-09-16 12:00:48 +02:00
Eric
63f8ec594c
N°2847 - Refactor Web Pages classes - Add UIBlockManager to the WebPage
2020-09-09 18:10:06 +02:00
bruno DA SILVA
08c1f4f072
autoload rework
...
- bootstrap.inc.php is now included by approot.inc.php
- remove all unescessaries includes of bootstrap.inc.php
- in bootstrap.inc.php autoload can be bypassed using a feature flag because "why not"
2019-11-08 16:51:57 +01:00
Molkobain
947e26d864
Internal: Change how the bootstrap.inc.php file is included in endpoints (This completes commit ec095896)
2019-08-13 17:38:51 +02:00
Molkobain
ec09589646
N°2439 Add real autoloader for framework files (not modules)
2019-08-13 13:46:19 +02:00
Molkobain
0a9b376684
N°2324 Remove legacy portal security check
2019-07-17 15:40:43 +02:00
Eric
c723d19e01
N°2323 - Fix calls to ajax endpoints
2019-06-17 15:59:43 +02:00
Denis Flaven
cbb9bcd93d
Proper use of the "304" (Not modified) HTTP header for InlineImages. Seems that FastCGI is more sensitive to incorrect HTTP headers than MPM...
...
SVN:trunk[5824]
2018-06-05 12:59:17 +00:00
Denis Flaven
c719fbf7fc
Bug fix (regression): use a different endpoint (ajax.document.render.php) for the output of the JS dictionary since we use the JS dictionary also when there is no user logged in (like in the login page).
...
SVN:trunk[5691]
2018-04-18 13:54:24 +00:00
Guillaume Lajarige
eb43a02bce
Fix regression introduced in r5183.
...
SVN:trunk[5211]
2018-01-08 12:40:05 +00:00
Guillaume Lajarige
fe23e099fe
N°1227 New configuration parameter (disable_attachments_download_legacy_portal) to disable attachments download from the legacy portal. Default is "true"!
...
SVN:trunk[5183]
2017-12-29 13:54:20 +00:00
Romain Quetiez
5bae9deecc
N.545 HTML images not displayed when no login is required for the page.
...
SVN:trunk[4506]
2016-12-08 12:45:56 +00:00
Denis Flaven
c147062aaa
Regression introduced after 2.3.0-beta [r4217]: broken links to donwload / display blobs.
...
SVN:trunk[4319]
2016-08-10 15:54:04 +00:00
Romain Quetiez
52309bb1e5
Improved images caching: since 2.3.0-beta, iTop handles inline images (case logs, ticket description) and a picture for a person (AttributeImage). This code refactoring handles a case where the browser checks for the validity of the image and the 304 response code can then be returned without checking anything because we assume that the URL of the image contains a signature of it (or the data cannot change -attachement and inline images are in this case).
...
SVN:trunk[4217]
2016-06-16 08:23:15 +00:00
