Pierre Goiffon
ecebe4ecd5
N°3416 XFrame and cache headers optimizations
...
* Remove XFrame header set in \WebPage::no_cache : not this method responsability, was confusing :/
* Remove no_cache() calls when already set in page constructor (ajax_page mainly)
* Also calls everywhere the \WebPage::no_cache method instead of setting headers manually
2020-12-02 17:19:05 +01:00
Pierre Goiffon
8bfcb14d0c
N°3416 XFrame-Options header is now set using a config parameter, defaults to SAMEORIGIN
...
Also adds an indirection (\WebPage::add_xframe_options) to set header
2020-12-02 17:17:11 +01:00
bruno DA SILVA
08c1f4f072
autoload rework
...
- bootstrap.inc.php is now included by approot.inc.php
- remove all unescessaries includes of bootstrap.inc.php
- in bootstrap.inc.php autoload can be bypassed using a feature flag because "why not"
2019-11-08 16:51:57 +01:00
Molkobain
947e26d864
Internal: Change how the bootstrap.inc.php file is included in endpoints (This completes commit ec095896)
2019-08-13 17:38:51 +02:00
Molkobain
ec09589646
N°2439 Add real autoloader for framework files (not modules)
2019-08-13 13:46:19 +02:00
Molkobain
0a9b376684
N°2324 Remove legacy portal security check
2019-07-17 15:40:43 +02:00
Eric
c723d19e01
N°2323 - Fix calls to ajax endpoints
2019-06-17 15:59:43 +02:00
Denis Flaven
cbb9bcd93d
Proper use of the "304" (Not modified) HTTP header for InlineImages. Seems that FastCGI is more sensitive to incorrect HTTP headers than MPM...
...
SVN:trunk[5824]
2018-06-05 12:59:17 +00:00
Denis Flaven
c719fbf7fc
Bug fix (regression): use a different endpoint (ajax.document.render.php) for the output of the JS dictionary since we use the JS dictionary also when there is no user logged in (like in the login page).
...
SVN:trunk[5691]
2018-04-18 13:54:24 +00:00
Guillaume Lajarige
eb43a02bce
Fix regression introduced in r5183.
...
SVN:trunk[5211]
2018-01-08 12:40:05 +00:00
Guillaume Lajarige
fe23e099fe
N°1227 New configuration parameter (disable_attachments_download_legacy_portal) to disable attachments download from the legacy portal. Default is "true"!
...
SVN:trunk[5183]
2017-12-29 13:54:20 +00:00
Romain Quetiez
5bae9deecc
N.545 HTML images not displayed when no login is required for the page.
...
SVN:trunk[4506]
2016-12-08 12:45:56 +00:00
Denis Flaven
c147062aaa
Regression introduced after 2.3.0-beta [r4217]: broken links to donwload / display blobs.
...
SVN:trunk[4319]
2016-08-10 15:54:04 +00:00
Romain Quetiez
52309bb1e5
Improved images caching: since 2.3.0-beta, iTop handles inline images (case logs, ticket description) and a picture for a person (AttributeImage). This code refactoring handles a case where the browser checks for the validity of the image and the 304 response code can then be returned without checking anything because we assume that the URL of the image contains a signature of it (or the data cannot change -attachement and inline images are in this case).
...
SVN:trunk[4217]
2016-06-16 08:23:15 +00:00
