1650 Commits (12db97de8c9c24fa925e9695a43a77f00d65afad)

Author	SHA1	Message	Date
Jens Ulferts	d5daa90937	prevents exploiting implicit mysql typecasting ... This should prevent an attacker from issuing a request where he sends a token param casted to integer. MySql would cast the value attribute of Token to integer which is either the integer at the beginning of the value or, in absence of such, 0.	12 years ago
Martin Linkhorst	890ceb2524	update request are now :put	12 years ago
Martin Linkhorst	b32e9c0028	fix a deprecation warning	12 years ago
Martin Linkhorst	3fa6738244	this needs to issue a put request	12 years ago
Martin Linkhorst	28ae758d6b	REVIEW: the wiki partial got removed in favor of the wiki_tabs feature. for now, just render nothing	12 years ago
Martin Linkhorst	252fb107ea	revert an old commit and assign watcher parameters through mass assignment again. instead, add a validation in the model that ensures that the user is allowed to watch the watchable.	12 years ago
Martin Linkhorst	cf606a2f1f	make robots work: "/robots", "/robots.txt", and "/welcome/robots.txt" (which the former two map to) will work correctly. if you want "/welcome/robots(.html)" to work add a robots.html.erb file in "/app/views/welcome".	12 years ago
Jens Ulferts	1ee8a47cfd	removes "updated by" information and back link on xhr journal diff requests ... * renders a partial without the mentioned elements * when using standard request the information is still presented. This enables opening the diff in a new tab/window.	12 years ago
Eric Davis	84fc92ac92	Add JournalsController#diff to diff a single field	12 years ago
Martin Linkhorst	2d3b20d905	define the default sort order at a single place	12 years ago
Martin Linkhorst	c5280b970f	in order to give plugins consistent entry points ... to patch core classes, we can use ActiveSupport's lazy load hooks. this one will allow plugins to register callbacks when the application controller is loaded. see the meta project plugin for a use case.	12 years ago
Gregor Schmidt	c94c0789bb	Async loading of project list in project jump box ... * Adding special URL endpoint to get all visible projects at once (w/o paging - as in /projects/index.json) * Adding openProject JS object to carry useful information and helper methods for JS land * Adding helper method to User to get the number of visible projects w/o loading all of them * Reducing dependency to DOM structure of select2 - using API access instead * Close menu when select2 list is closed	12 years ago
Gregor Schmidt	2379936cd8	Using flash.now instead of flash ... Since the text will be rendered immediately, we should use flash.now instead of flash. This way the message will not be stored in the session and emitted again with the next request.	12 years ago
Gregor Schmidt	237c0c9a50	Making i18n-js work for OpenProject ... * Limit i18n keys in JS to the 'js' scope to reduce payload * Update i18n gem to make i18n-js work with limited scopes * Exporting translations on server start and not on every request to save computing resources and avoid impact on response times * Configuring i18n-js to use the same fallbacks like the ruby part to ensure consistent behavior across languages * Removing rake tasks from Rakefile since (a) they do not belong there - should have been in lib/tasks - and (b) they are no longer needed, since the export happens at server start NB: public/javascripts/i18n needs to be writeable by the app server user.	12 years ago
Philipp Tessenow	a20c3068e0	fix typo in name of TimeEntry#earliest_date_for_project	12 years ago
Martin Linkhorst	eb1ee2d077	deprecation fix: explicitly define a layout when overwriting	12 years ago
Gregor Schmidt	eeb052280f	Load user memberships by default ... since nearly every view will check permissions, eager loading memberships might be a good idea.	12 years ago
Jens Ulferts	620fc311fc	adds some eager loading to the groups_controller ... * this is probably not comprehensive but just what I noticed	12 years ago
Martin Linkhorst	2120fd8359	name the project_id parameter correct	12 years ago
Martin Linkhorst	c4f7b22670	there is no plugin directory anymore	12 years ago
Martin Linkhorst	0105135c37	adding all helpers isn't necessary anymore	12 years ago
Martin Linkhorst	658dca7f06	move current_user helper	12 years ago
Martin Linkhorst	6be50fa6b9	refactor the way how themes work. ... all openproject themes are now in the gem openproject-themes and are loaded through the asset pipeline.	12 years ago
Martin Linkhorst	a67afceb0c	little refactoring of user preferences	12 years ago
Martin Linkhorst	b30fac4a59	refactor the welcome controller	12 years ago
Martin Linkhorst	6eafde439d	force attributes to be set where needed	12 years ago
Jens Ulferts	668d6ba1b8	increases robustness of menu item selection for wiki controller ... * when the user is not allowed or no menu item exists for the page we just return nil	12 years ago
Romano Licker	04541cc662	add before filter in order for the authentication to work ... corresponding tests can be found in chiliproject_tests plugin	12 years ago
Jens Ulferts	d02ebfde84	selects the currently edited menu entry in the main menu	12 years ago
Jens Ulferts	ce9b860b3f	explicitly defines the selected menu items for the wiki controller ... * index, new_child and the rest is handled separately * index and new_child are now scoped (by their symbol) under the wiki_menu_entry, so that the correct index/new_child page is selected. The symbols are still somewhat magical. * implements a method to add a dynamically evaluated method to determine the currently selected menu item	12 years ago
Romano Licker	936f0bbdcb	refactoring wiki hierarchy breadcrumb	12 years ago
Romano Licker	9cc7eafc15	integrate wiki_menu_items into wiki-module and ... menu manager - rename wiki_tabs table if exists	12 years ago
Romano Licker	7c8ac464cd	introduce wiki menu items ... this model replaces the chiliproject_wikitabs - plugin and extends its functionality	12 years ago
Romano Licker	2f772159a9	add default controller actions and build "create child page link" ... the code was largely taken from the 'chiliproject_wikitabs'	12 years ago
Martin Linkhorst	5325c2e1aa	this nice commit fixes the stack too deep error. as usual it was a human mistake :(	12 years ago
Martin Linkhorst	5fb51daab1	applied the rails 3.2 generator	12 years ago
Martin Linkhorst	2e927d6dc0	this nice commit fixes the stack too deep error. as usual it was a human mistake :(	12 years ago
Martin Linkhorst	40cecc66a3	applied the rails 3.2 generator	12 years ago
Philipp Tessenow	79ab8d6d6b	added wiki/list_attachments route, which returns a json array of available attachments	12 years ago
Philipp Tessenow	8ba74a6d50	implement inline diff	12 years ago
Felix Schäfer	84e4701d8b	Copy watchers when copying an issue	12 years ago
Martin Linkhorst	6200acf6f6	fix some active record queries for postgres and apply a patch from redmine at the same time	12 years ago
Martin Linkhorst	21fa39c25a	fix the user tests by storing user and his preferences in two steps	12 years ago
Martin Linkhorst	47e7e7997d	REVIEW: find_object_and_scope fails because we don't have any scope set. does it come from anywhere else?	12 years ago
Martin Linkhorst	09e496f54b	REVIEW: get the changes by joining with the changesets in order to have access to the #committer of the changesets as required in the tests which group changes by the committer	12 years ago
jwollert	4511a4e83d	adds i18n-js gem providing us with easier access to translations in js	12 years ago
Martin Linkhorst	4b7c30a6be	REVIEW: remove require_dependency which shouldn't be needed anymore?	12 years ago
Philipp Tessenow	c13efb2996	generate nokogiri diffs	12 years ago
Philipp Tessenow	4dba450164	require nokogiri/patch and add it to gemfile	12 years ago
Martin Linkhorst	1775f004b9	DEPRECATION FIX: remove deprecated constant RAILS_ENV	12 years ago