iTop/application at support/2.1.0 - iTop

#842 Internal: recode the notifications page to allow several types of actions

2013-11-26 09:39:34 +00:00

ajaxwebpage.class.inc.php

#970 and #650 Corrupted attachements. Reworked the cleanup of undesired output, to protect it against the case when the output buffer is unfortunately closed. On the other hand, I found out that several output buffer can be stacked. Thus the protection could be further improved (difficulty: that can be web server dependent).

2014-10-23 15:48:49 +00:00

application.inc.php

Module installation information always loaded within the meta model

2013-08-30 14:20:20 +00:00

applicationcontext.class.inc.php

Updated copyright (2012) and license (LGPL changed to AGPL)

2012-10-23 21:41:36 +00:00

applicationextension.inc.php

Make it possible to overload RestUtils (static methods called with static:: instead of self::) - iTop NOW REQUIRES PHP 5.3: we have verified, there are very installations of iTop made on PHP 5.2. It is worth to note that PHP 5.3 is already end of life (5.4 will become end of life in 8 months) -retrofit from trunk

2015-05-26 11:46:49 +00:00

audit.category.class.inc.php

Edit in-place for audit rules from their category.

2012-10-26 14:25:23 +00:00

audit.rule.class.inc.php

Updated copyright (2012) and license (LGPL changed to AGPL)

2012-10-23 21:41:36 +00:00

clipage.class.inc.php

Enabled KPI tracing for the export page... fixed regression on the setup page (rewrote the change in a much more defensive way)

2014-02-04 14:20:20 +00:00

cmdbabstract.class.inc.php

#1041 Protect against some XSS injections

2014-12-18 08:50:04 +00:00

csvpage.class.inc.php

#970 and #650 Corrupted attachements. Reworked the cleanup of undesired output, to protect it against the case when the output buffer is unfortunately closed. On the other hand, I found out that several output buffer can be stacked. Thus the protection could be further improved (difficulty: that can be web server dependent).

2014-10-23 15:48:49 +00:00

dashboard.class.inc.php

Fixed a potential XSS vulnerability.

2015-07-30 09:12:42 +00:00

dashboardlayout.class.inc.php

Dashboard re-engineering

2013-06-27 15:21:35 +00:00

dashlet.class.inc.php

(retrofit from trunk) Security: prevent grouping on password fields since it may lead to disclosure of the encrypted version of the password.

2016-06-22 14:01:45 +00:00

datatable.class.inc.php

#985 Shortcut auto refresh degrading table cosmetics

2014-09-12 08:18:06 +00:00

displayblock.class.inc.php

(retrofit from trunk) Security: prevent grouping on password fields since it may lead to disclosure of the encrypted version of the password.

2016-06-22 14:01:45 +00:00

excelexporter.class.inc.php

Integration of the Excel (XLSX) export feature. (Limitation: export.php takes into account neither the "fields" parameter nor the list of fields defined in the QueryPhrasebook when exporting in XLSX format)

2014-10-31 17:59:14 +00:00

forms.class.inc.php

- Proper handling of the validation hierarchy in property sheets.

2014-12-12 16:38:17 +00:00

iotask.class.inc.php

Updated copyright (2012) and license (LGPL changed to AGPL)

2012-10-23 21:41:36 +00:00

itopwebpage.class.inc.php

#970 and #650 Corrupted attachements. Reworked the cleanup of undesired output, to protect it against the case when the output buffer is unfortunately closed. On the other hand, I found out that several output buffer can be stacked. Thus the protection could be further improved (difficulty: that can be web server dependent).

2014-10-23 15:48:49 +00:00

itopwizardwebpage.class.inc.php

Updated copyright (2012) and license (LGPL changed to AGPL)

2012-10-23 21:41:36 +00:00

loginwebpage.class.inc.php

Use one-way encryption for storing the token used for the "Forgotten password" feature.

2016-02-19 18:21:54 +00:00

menunode.class.inc.php

#780 Auto refresh for the dashboards (+ cosmetics changes for the shortcuts)

2013-10-18 14:14:48 +00:00

nicewebpage.class.inc.php

New mechanism: a module page can be accessed by the mean of a canonical URL (utils::GetAbsoluteUrlModulePage to build the proper URL)

2013-08-27 14:04:59 +00:00

portalwebpage.class.inc.php

#1088 : support of HTMLEditor in the PortalWebPage, for example if the description of a ticket is in HTML.

2015-04-07 15:56:16 +00:00

query.class.inc.php

#933 Search form for Query Phrasebook items. If you implement your own menus (equivalent to itop-welcome-itil module), make sure that you update the menu definition to show the search form at the top.

2014-05-30 07:42:17 +00:00

shortcut.class.inc.php

#1020 Restrict dashboard/shortcut refresh interval

2014-12-03 11:38:19 +00:00

sqlblock.class.inc.php

Updated copyright (2012) and license (LGPL changed to AGPL)

2012-10-23 21:41:36 +00:00

startup.inc.php

(retrofit from trunk) Properly sanitize the "switch_env" parameter and take it into account only if it contains a valid value.

2016-06-22 12:16:20 +00:00

template.class.inc.php

Silently discard unknown attributes in object templates (in case some modules have not been installed)

2013-05-15 10:18:55 +00:00

transaction.class.inc.php

Retrofit of file based "transactions" as an alternative to session based ones.

2015-08-05 14:12:34 +00:00

ui.extkeywidget.class.inc.php

#1041 Protect against some XSS injections

2014-12-18 08:50:04 +00:00

ui.htmleditorwidget.class.inc.php

#1174 Support HTML fields in the bulk modify form (capability to disable/enable) the field live (retrofit from trunk)

2016-02-01 15:22:49 +00:00

ui.linksdirectwidget.class.inc.php

Support of derived classes in "add_remove" edition mode for AttributeLinkSet fields (the search form was not refreshing / loading properly when toggling the class to search for).

2015-11-20 14:29:30 +00:00

ui.linkswidget.class.inc.php

#778 Issue on list sort order when editing an element - fixed a regression

2014-09-15 16:06:46 +00:00

ui.passwordwidget.class.inc.php

#829 Corrupted pwd when attempting to create an account without any profile

2013-11-25 09:01:35 +00:00

uilinkswizard.class.inc.php

2012-10-23 21:41:36 +00:00

uiwizard.class.inc.php

2012-10-23 21:41:36 +00:00

user.dashboard.class.inc.php

2012-10-23 21:41:36 +00:00

user.preferences.class.inc.php

#1022 Do cascade the resolution of an incident to its child requests + rework of the lifecycle/actions to ease the extensibility (New handlers: Rest, Copy, SetCurrentDate, SetCurrentUser, SetElapsedTime)

2014-11-19 09:44:52 +00:00

utils.inc.php

Integration of the Excel (XLSX) export feature... (regression fix)

2014-11-01 07:46:57 +00:00

webpage.class.inc.php

#970 and #650 Corrupted attachements. Reworked the cleanup of undesired output, to protect it against the case when the output buffer is unfortunately closed. On the other hand, I found out that several output buffer can be stacked. Thus the protection could be further improved (difficulty: that can be web server dependent).

2014-10-23 15:48:49 +00:00

wizardhelper.class.inc.php

2012-10-23 21:41:36 +00:00

xlsxwriter.class.php

Integration of the Excel (XLSX) export feature. (Limitation: export.php takes into account neither the "fields" parameter nor the list of fields defined in the QueryPhrasebook when exporting in XLSX format)

2014-10-31 17:59:14 +00:00

xmlpage.class.inc.php

#970 and #650 Corrupted attachements. Reworked the cleanup of undesired output, to protect it against the case when the output buffer is unfortunately closed. On the other hand, I found out that several output buffer can be stacked. Thus the protection could be further improved (difficulty: that can be web server dependent).

2014-10-23 15:48:49 +00:00