5641 Commits (057badaa1de5aa6eeac88ee0c0348c1e4b793f20)

Author	SHA1	Message	Date
Holger Just	afa147beee	Fix SQL injection via nested hashes in conditions. CVE-2012-2695 #1037	12 years ago
Holger Just	5c71f038c5	Fix SQL injection via nested hashes in conditions (CVE-2012-2694) #1036	12 years ago
Holger Just	5ac0002526	[#1025] Fix Rails vulnerability (CVE-2012-2660)	12 years ago
Jens Ulferts	d6516ccfc4	rewrite routes to reflect the new syntax ... * functionally it should be the same * uses Redmine::Utils.relative_url_root as the base scope	12 years ago
Jens Ulferts	723cd7ebb8	renames globalize2 patch to globalize3 patch as this is what is patched	12 years ago
Jens Ulferts	61d7c58f65	replaces own validates_uniqueness with one issued as a pull request ... * will not yet work with rails 3.0	12 years ago
Jens Ulferts	fd94b7ca07	renames mime_types initializer ... * should not be dependant on the load order	12 years ago
Jens Ulferts	8994831cda	Revert "REVIEW: deactivates custom_fields#possible_values translation overrides" ... This reverts commit 28f51382f390b7aa45de958c2ed35b88620b3046.	12 years ago
Martin Linkhorst	017191b26e	make it ruby 1.9.3 and 1.8.7 compatible, yay	12 years ago
Martin Linkhorst	1caae19c22	REVIEW: patch active record base since more than one class use it	12 years ago
Martin Linkhorst	65f1302b57	correct markup for inline errors	12 years ago
Martin Linkhorst	771dcf4fb0	keep the right api for human_attribute_name	12 years ago
Jens Ulferts	52e106c113	redefines api mime type ... * broken by rails upgrade	12 years ago
Jens Ulferts	5babf1d05f	REVIEW: deactivates method manipulation for ActiveRecord::Errors#on ... * get rails 3 to boot first	12 years ago
Jens Ulferts	12e24f0f47	REVIEW: deactivates alias method chaining of TMail::Unquoter#convert_to ... * get rails 3 to boot first	12 years ago
Jens Ulferts	3c3571a99f	REVIEW: deactivates custom_fields#possible_values translation overrides ... * get rails 3 to boot first	12 years ago
Jens Ulferts	5222ad32db	removes initializer statements that are already part of rails 3	12 years ago
Jens Ulferts	4e42f69ba4	adds/modifies files required for starting the application with rails 3	12 years ago
Martin Linkhorst	d23f5feb06	added missing translations	12 years ago
Martin Linkhorst	e04bf5c99a	allow columns to be marked as summable or not	12 years ago
Jens Ulferts	dfe1cfbbf5	adding hungarian translations	12 years ago
Jens Ulferts	a51467c47d	updating hungarian translation	12 years ago
Jens Ulferts	f0ebe9f0b9	adding settings to control user deletion ... * slit up into admin allowed to delete user accounts and users allowed delete their own account	12 years ago
Jens Ulferts	2f05624f64	i18n for user deletion ... * only de is translated	12 years ago
Jens Ulferts	745066e455	display different information concerning the user deletion depending on whether the user to be deleted is the current user or not	12 years ago
Jens Ulferts	58735b8f4b	enable admins to delete other users	12 years ago
Jens Ulferts	5e13836c17	have destroying user executed as a background task ... * using delayed_job as the gem for that * this could also be used for other background-jobs that are currently implemented using cron	12 years ago
Jens Ulferts	a02c3e5f32	i18n for deleted user	12 years ago
Jens Ulferts	db5a758b6d	adding a delete account link to the "my account" menu ... * before the deletion, the user is presented a view with the consequences of deleting his account * deleted users are logged out	12 years ago
Jens Ulferts	ba1e0134a9	adding hungarian translations	13 years ago
Martin Linkhorst	9bad9f5869	merge list sums plugin into the core	13 years ago
jwollert	20283ebc20	rename 'Meetings' to 'Besprechung' for our german friends	13 years ago
Jens Ulferts	f5b9644ba0	add missing i18n for label_hourly_rate which is part of the breadcrumb	13 years ago
Jens Ulferts	8ec3f24de3	patching globalize to be able to circumvent the cache ... * based on Felix Schäfer's work	13 years ago
Jens Ulferts	d25a8351a4	patching i18n to provide a without_fallback method ... * based on Felix Schäfer's work	13 years ago
jwollert	c7ef39f0c7	rebranding of default settings to openproject	13 years ago
jwollert	fb85611816	rebrand noscript translations to openproject	13 years ago
Romano Licker	51be005760	remove exception which was thrown on mass assign protected attributes ... this method is thrown even if the attributes are protected via e.g. attr_protected additionally it enforces the use of safe_attributes which is not necessary	13 years ago
Jens Ulferts	3d4ea2c4cc	split up costlog controller edit into new, create, edit, update ... * fix mass_assignment problem on create * changing routes * will still need more refactoring	13 years ago
Martin Linkhorst	3e034514f6	re-allow mass assignment of assign_to_id of issue categories. but issue category won't be valid unless assignee is also project member of the category. (mirroring what is possible to select in the view) fixes #28790	13 years ago
Romano Licker	d9069356e1	display errors correctly when adding a member to a project ... - when nothing is selected - when a user is missing - when a role is missing	13 years ago
Martin Linkhorst	01042a5c54	add missing translation stückkosten buchen	13 years ago
Martin Linkhorst	019be970bb	added missing translation, part of #26544	13 years ago
Martin Linkhorst	1fd10e5243	use super without explicit params, cleanup whitespace	13 years ago
Jens Ulferts	e4dfb3ed80	Initialize locale_fallbacks only if Settings table exists ... * otherwise initial migrations don't work	13 years ago
Martin Linkhorst	20f7643187	forgotten locale file from another issue. completely unrelated to mass assignment	13 years ago
Romano Licker	eaba2414cf	add label "Move issue" for breadcrumb	13 years ago
Martin Linkhorst	337561261a	some documentation regarding mass assignment, show full stack trace in console	13 years ago
Martin Linkhorst	42bc728288	fix to work with protected :project_id	13 years ago
Martin Linkhorst	1fce5b6a8f	added attr_protected calls to protect mass assignment of :project_id through a view	13 years ago