Pierre Goiffon a4f6f6e877 N°4368 Fix CORB blocking regression (#598) ...

Don't send X-Content-Type-Options HTTP header for certain WebPage impl to workaround CORB blocking
To disable globally this new behavior introduced in 9865bf07, set the `security.enable_header_xcontent_type_options` config parameter to false

Thanks @Molkobain for the review !

2024-01-05 10:41:18 +01:00

..

templates

Convert all files from CrLf to Lf (preparing merge to develop)

2018-10-18 14:20:40 +02:00

ajaxwebpage.class.inc.php

N°4368 Fix CORB blocking regression (#598)

2024-01-05 10:41:18 +01:00

application.inc.php

Convert all files from CrLf to Lf (preparing merge to develop)

2018-10-18 14:20:40 +02:00

applicationcontext.class.inc.php

N°1583 - No filter applied if only one org defined

2018-11-21 11:25:24 +01:00

applicationextension.inc.php

N°6458 Security hardening

2023-11-15 11:14:07 +01:00

audit.category.class.inc.php

Convert all files from CrLf to Lf (preparing merge to develop)

2018-10-18 14:20:40 +02:00

audit.rule.class.inc.php

Convert all files from CrLf to Lf (preparing merge to develop)

2018-10-18 14:20:40 +02:00

capturewebpage.class.inc.php

Convert all files from CrLf to Lf (preparing merge to develop)

2018-10-18 14:20:40 +02:00

clipage.class.inc.php

Revert "N°2214 Add PHP check in CLI scripts"

2020-06-15 15:18:26 +02:00

cmdbabstract.class.inc.php

N°6458 Security hardening

2023-11-15 11:14:07 +01:00

csvpage.class.inc.php

N°4368 add sending X-Content-Type-Options HTTP header

2023-12-19 18:25:26 +01:00

dashboard.class.inc.php

N°6777 - Security hardening

2023-10-17 09:12:40 +02:00

dashboardlayout.class.inc.php

N°2735 - Continue rework of the dashlet id generation:

2020-02-26 16:29:32 +01:00

dashlet.class.inc.php

N°4900 - Stored XSS in dashlets failed OQL query

2022-05-18 08:10:01 +02:00

datamodel.application.xml

✅ Fix tests

2020-10-07 16:21:36 +02:00

datatable.class.inc.php

N°6217 - Add accessiblity meta data for title on "Power menu"

2023-04-25 21:51:32 +02:00

displayblock.class.inc.php

N°6217 - Add accessiblity meta data for title on "Power menu"

2023-04-25 21:51:32 +02:00

errorpage.class.inc.php

N°2641 - Create a dedicated ErrorPage for fatal errors

2020-05-14 14:37:38 +02:00

excelexporter.class.inc.php

N°1248 - User Management Portal

2018-01-30 15:17:51 +00:00

forms.class.inc.php

N°4538 - Dashlet Groupby on ExternalKey with special character, bad display - remove useless test

2022-05-23 14:21:03 +02:00

Html2Text.php

N.441 Character "à" in a case log causing the REST/JSON API to fail if mbstring is not enabled

2016-09-26 18:45:32 +00:00

Html2TextException.php

(HTML) Formatted Case Logs, Description and Notifications with inline images uploaded as Attachments. Beta Version !!

2016-02-19 10:03:59 +00:00

iotask.class.inc.php

Convert all files from CrLf to Lf (preparing merge to develop)

2018-10-18 14:20:40 +02:00

itopwebpage.class.inc.php

N°4368 add sending X-Content-Type-Options HTTP header

2023-12-19 18:25:26 +01:00

itopwizardwebpage.class.inc.php

Convert all files from CrLf to Lf (preparing merge to develop)

2018-10-18 14:20:40 +02:00

loginbasic.class.inc.php

N°6358 - Login API REST

2023-06-07 09:17:24 +02:00

logindefault.class.inc.php

N°6358 - Login API REST

2023-06-07 09:17:24 +02:00

loginexternal.class.inc.php

N°6358 - Login API REST

2023-06-07 09:17:24 +02:00

loginform.class.inc.php

N°6358 - Login API REST

2023-06-07 09:17:24 +02:00

logintwig.class.inc.php

N°2315 - Login screen extensibility API refactor

2019-10-24 14:56:01 +02:00

loginurl.class.inc.php

N°6358 - Login REST API

2023-06-07 10:09:30 +02:00

loginwebpage.class.inc.php

N°4368 add sending X-Content-Type-Options HTTP header

2023-12-19 18:25:26 +01:00

maintenancemsg.php

N°2641 - Create a dedicated ErrorPage for fatal errors

2020-05-14 14:37:38 +02:00

menunode.class.inc.php

N°2641 - Create a dedicated ErrorPage for fatal errors

2020-05-14 14:37:38 +02:00

newsroomprovider.class.inc.php

Newsroom finalization & integration tests.

2018-12-06 15:38:29 +01:00

nicewebpage.class.inc.php

N°2314 - Refactor part of the compilation in dedicated helpers

2020-02-27 15:09:57 +01:00

pdfpage.class.inc.php

📝 Some @since annotations were missing complete version (ex 2.5 instead of 2.5.0)

2020-02-21 18:05:30 +01:00

portaldispatcher.class.inc.php

Improved the User Rights management API:

2015-12-15 20:30:30 +00:00

query.class.inc.php

N°1872 Regression when editing query phrasebook entries. Fixed.

2018-12-13 11:46:39 +01:00

shortcut.class.inc.php

Convert all files from CrLf to Lf (preparing merge to develop)

2018-10-18 14:20:40 +02:00

startup.inc.php

6548 - [ER] Hide DBHost and DBUser in log

2023-07-10 17:37:27 +02:00

template.class.inc.php

N°2313 - Markup extensibility: Update usages of admin. console tabs to have codes and titles

2020-01-15 08:42:35 +01:00

themehandler.class.inc.php

N°3078 - Fix error on login while in maintenance mode

2020-08-27 17:10:37 +02:00

transaction.class.inc.php

Merge remote-tracking branch 'origin/support/2.6' into support/2.7

2021-12-08 17:16:33 +01:00

twigextension.class.inc.php

N°5741 - remove use of get_config_parameter in Twig

2022-11-23 15:09:20 +01:00

ui.extkeywidget.class.inc.php

N°3129 PHP 8.0 compat : code review modifications

2022-01-31 16:41:35 +01:00

ui.htmleditorwidget.class.inc.php

N°1164, SF#1491: Add code snippets with syntax highlighting to CaseLog/HTML fields

2019-05-17 15:59:01 +02:00

ui.linksdirectwidget.class.inc.php

N°3129 PHP 8.0 compat: Fix "Deprecated: Required parameter ... follows optional parameter ..."

2022-01-28 17:01:07 +01:00

ui.linkswidget.class.inc.php

🎨 Fix bad parameter init

2019-12-03 08:38:57 +01:00

ui.passwordwidget.class.inc.php

Updated jQuery to v3.3.1

2018-07-23 06:58:30 +00:00

ui.searchformforeignkeys.class.inc.php

advanced search: removal of legacy_search_drawer_open

2018-04-06 12:06:20 +00:00

uiwizard.class.inc.php

Convert all files from CrLf to Lf (preparing merge to develop)

2018-10-18 14:20:40 +02:00

user.dashboard.class.inc.php

Updated copyright (2012) and license (LGPL changed to AGPL)

2012-10-23 21:41:36 +00:00

user.preferences.class.inc.php

N°2634 / N°2735 Migrate dashlet user prefs to new dashlet ID format

2020-02-14 15:59:09 +01:00

utils.inc.php

N°6458 Security hardening

2023-11-15 11:14:07 +01:00

webpage.class.inc.php

N°4368 Fix CORB blocking regression (#598)

2024-01-05 10:41:18 +01:00

wizardhelper.class.inc.php

N°2329 PHP 7.4 compat : remove get_magic_quotes_gpc/get_magic_quotes_runtime calls

2019-12-24 17:30:12 +01:00

xlsxwriter.class.php

✅ Fix CI

2021-05-28 08:48:47 +02:00

xmlpage.class.inc.php

N°4368 Fix CORB blocking regression (#598)

2024-01-05 10:41:18 +01:00