iTop/application at support/2.1.1 - iTop

#842 Internal: recode the notifications page to allow several types of actions

2013-11-26 09:39:34 +00:00

ajaxwebpage.class.inc.php

#970 and #650 Corrupted attachements. Reworked the cleanup of undesired output, to protect it against the case when the output buffer is unfortunately closed. On the other hand, I found out that several output buffer can be stacked. Thus the protection could be further improved (difficulty: that can be web server dependent).

2014-10-23 15:48:49 +00:00

application.inc.php

Module installation information always loaded within the meta model

2013-08-30 14:20:20 +00:00

applicationcontext.class.inc.php

Updated copyright (2012) and license (LGPL changed to AGPL)

2012-10-23 21:41:36 +00:00

applicationextension.inc.php

Bug fix: prevent a crash of the web services when trying to log a non scalar paramater value...

2015-04-16 15:35:09 +00:00

audit.category.class.inc.php

Edit in-place for audit rules from their category.

2012-10-26 14:25:23 +00:00

audit.rule.class.inc.php

Updated copyright (2012) and license (LGPL changed to AGPL)

2012-10-23 21:41:36 +00:00

clipage.class.inc.php

Enabled KPI tracing for the export page... fixed regression on the setup page (rewrote the change in a much more defensive way)

2014-02-04 14:20:20 +00:00

cmdbabstract.class.inc.php

#1041 Protect against some XSS injections

2014-12-18 08:50:04 +00:00

csvpage.class.inc.php

#970 and #650 Corrupted attachements. Reworked the cleanup of undesired output, to protect it against the case when the output buffer is unfortunately closed. On the other hand, I found out that several output buffer can be stacked. Thus the protection could be further improved (difficulty: that can be web server dependent).

2014-10-23 15:48:49 +00:00

dashboard.class.inc.php

Fixed a potential XSS vulnerability.

2015-07-30 09:07:47 +00:00

dashboardlayout.class.inc.php

Dashboard re-engineering

2013-06-27 15:21:35 +00:00

dashlet.class.inc.php

(retrofit from trunk) Security: prevent grouping on password fields since it may lead to disclosure of the encrypted version of the password.

2016-06-22 14:00:37 +00:00

datatable.class.inc.php

#985 Shortcut auto refresh degrading table cosmetics

2014-09-12 08:18:06 +00:00

displayblock.class.inc.php

(retrofit from trunk) Security: prevent grouping on password fields since it may lead to disclosure of the encrypted version of the password.

2016-06-22 14:00:37 +00:00

excelexporter.class.inc.php

Integration of the Excel (XLSX) export feature. (Limitation: export.php takes into account neither the "fields" parameter nor the list of fields defined in the QueryPhrasebook when exporting in XLSX format)

2014-10-31 17:59:14 +00:00

forms.class.inc.php

Fixed another regression of 3500: LongTextFields also support multiple forbidden lists...

2015-03-12 15:26:08 +00:00

iotask.class.inc.php

Updated copyright (2012) and license (LGPL changed to AGPL)

2012-10-23 21:41:36 +00:00

itopwebpage.class.inc.php

#970 and #650 Corrupted attachements. Reworked the cleanup of undesired output, to protect it against the case when the output buffer is unfortunately closed. On the other hand, I found out that several output buffer can be stacked. Thus the protection could be further improved (difficulty: that can be web server dependent).

2014-10-23 15:48:49 +00:00

itopwizardwebpage.class.inc.php

Updated copyright (2012) and license (LGPL changed to AGPL)

2012-10-23 21:41:36 +00:00

loginwebpage.class.inc.php

Use one-way encryption for storing the token used for the "Forgotten password" feature.

2016-02-19 18:20:28 +00:00

menunode.class.inc.php

#780 Auto refresh for the dashboards (+ cosmetics changes for the shortcuts)

2013-10-18 14:14:48 +00:00

nicewebpage.class.inc.php

New mechanism: a module page can be accessed by the mean of a canonical URL (utils::GetAbsoluteUrlModulePage to build the proper URL)

2013-08-27 14:04:59 +00:00

portalwebpage.class.inc.php

#1041 Protect against some XSS injections

2014-12-18 08:50:04 +00:00

query.class.inc.php

#933 Search form for Query Phrasebook items. If you implement your own menus (equivalent to itop-welcome-itil module), make sure that you update the menu definition to show the search form at the top.

2014-05-30 07:42:17 +00:00

shortcut.class.inc.php

#1020 Restrict dashboard/shortcut refresh interval

2014-12-03 11:38:19 +00:00

sqlblock.class.inc.php

Updated copyright (2012) and license (LGPL changed to AGPL)

2012-10-23 21:41:36 +00:00

startup.inc.php

(retrofit from trunk) Properly sanitize the "switch_env" parameter and take it into account only if it contains a valid value.

2016-06-22 12:12:04 +00:00

template.class.inc.php

Silently discard unknown attributes in object templates (in case some modules have not been installed)

2013-05-15 10:18:55 +00:00

transaction.class.inc.php

Retrofit of file based "transactions" as an alternative to session based ones.

2015-08-05 14:18:13 +00:00

ui.extkeywidget.class.inc.php

#1041 Protect against some XSS injections

2014-12-18 08:50:04 +00:00

ui.htmleditorwidget.class.inc.php

2012-10-23 21:41:36 +00:00

ui.linksdirectwidget.class.inc.php

Support of derived classes in "add_remove" edition mode for AttributeLinkSet fields (the search form was not refreshing / loading properly when toggling the class to search for).

2015-11-20 14:26:05 +00:00

ui.linkswidget.class.inc.php

#778 Issue on list sort order when editing an element - fixed a regression

2014-09-15 16:06:46 +00:00

ui.passwordwidget.class.inc.php

#829 Corrupted pwd when attempting to create an account without any profile

2013-11-25 09:01:35 +00:00

uilinkswizard.class.inc.php

2012-10-23 21:41:36 +00:00

uiwizard.class.inc.php

2012-10-23 21:41:36 +00:00

user.dashboard.class.inc.php

2012-10-23 21:41:36 +00:00

user.preferences.class.inc.php

#1022 Do cascade the resolution of an incident to its child requests + rework of the lifecycle/actions to ease the extensibility (New handlers: Rest, Copy, SetCurrentDate, SetCurrentUser, SetElapsedTime)

2014-11-19 09:44:52 +00:00

utils.inc.php

Integration of the Excel (XLSX) export feature... (regression fix)

2014-11-01 07:46:57 +00:00

webpage.class.inc.php

#970 and #650 Corrupted attachements. Reworked the cleanup of undesired output, to protect it against the case when the output buffer is unfortunately closed. On the other hand, I found out that several output buffer can be stacked. Thus the protection could be further improved (difficulty: that can be web server dependent).

2014-10-23 15:48:49 +00:00

wizardhelper.class.inc.php

2012-10-23 21:41:36 +00:00

xlsxwriter.class.php

Integration of the Excel (XLSX) export feature. (Limitation: export.php takes into account neither the "fields" parameter nor the list of fields defined in the QueryPhrasebook when exporting in XLSX format)

2014-10-31 17:59:14 +00:00

xmlpage.class.inc.php

#970 and #650 Corrupted attachements. Reworked the cleanup of undesired output, to protect it against the case when the output buffer is unfortunately closed. On the other hand, I found out that several output buffer can be stacked. Thus the protection could be further improved (difficulty: that can be web server dependent).

2014-10-23 15:48:49 +00:00