Commit Graph

2031 Commits (1a70ea1b756a15d826c15cdfacca1ab51603ffe8)

Author SHA1 Message Date
Jens Ulferts 32506ccab5 removes no longer required before filter 10 years ago
Hagen Schink 08c55efd49 Consider ids parameter 10 years ago
Ion Biziiac d5de2dd5d4 Fix for Possible to see list of types without being logged in 10 years ago
Hagen Schink 6950592a89 Extract WP update details to service object 10 years ago
Christian Ratz a452abc731 fixes repo auth 10 years ago
Hagen Schink cce653d1e2 Replace unless by if 10 years ago
slawa 13ceb4edf8 Treat case when no name or identifier was provided 10 years ago
Martin Linkhorst 8877883c63 given openproject runs in a subdirectory we cannot allow redirecting to a different subdirectory. also tries to catch shenanigans to circumvent the check like ".." in the path. 10 years ago
Philipp Tessenow a7b021d010 re-integrate repository_authentication plugin 10 years ago
Sebastian Schuster d13ccc572e Fixes on the fly version creation 11 years ago
Martin Linkhorst 1f36d43b70 there was a wrong parenthesis: the last match needs to be ANDed with all the prior checks. instead of changing it, refactored the code to be more clear. still allows redirects to different sub-uris. 11 years ago
Philipp Tessenow d8cb82a2e8 explicitly allow home path in back_url 11 years ago
Philipp Tessenow 0cdbaf39f6 fix protocol-relative redirection test 11 years ago
jplang 1db8642ac6 [security] fixed back url verification 11 years ago
Hagen Schink 181347566c Let anonymous user access public custom fields 11 years ago
Hagen Schink c87cf9b7bf Remove duplicate WP custom fields 11 years ago
Hagen Schink 5065215415 Filter WP custom fields by membership 11 years ago
Hagen Schink 6ce1f68d7e Deny anonymous access 11 years ago
Hagen Schink 6f0dd06861 Preview caption reflects the previewed attribute 11 years ago
Hagen Schink a26445babf Authorize preview object access 11 years ago
Hagen Schink 5eaf9050e0 Reset order of preview texts 11 years ago
Hagen Schink 21c97b11a2 Authorize through #find_optional_project 11 years ago
Hagen Schink 33656a7456 Fix work package preview permission 11 years ago
Hagen Schink 3a58ad5cb4 Fix preview 11 years ago
Ion Biziiac 4a13ce44c3 Fix APIv2 does not rewire parents correctly 11 years ago
Jens Ulferts 90e1a9863e reduces memory and increases performance of api planning_element#index 11 years ago
Hagen Schink 8c144050e4 Move copy project implementation to DJ 11 years ago
Hagen Schink 47e1b136b1 Allow to extend list of scripts by plug-ins 11 years ago
Ion Biziiac 0236f08c63 Fix default work package status destroy 11 years ago
Martin Linkhorst fb096b0c86 infer content type from contents of file instead of its file extension 11 years ago
Toshi MARUYAMA 4775f66e77 fix non-ascii attachment file name get corrupted in IE11 (#16711) 11 years ago
Jean-Philippe Lang b8ffa31e1a Potentiel data leak in "Invalid form authenticity token" error screen (#16511). 11 years ago
Till Breuer fc38f8e16a Don't preselect inactive default priorities for new work packages 11 years ago
Till Breuer 1e29f9fb3a Fix duplication of work package priority in priority drop down 11 years ago
Christian Ratz 6b3f7c4dc8 Removed path from guessed host 11 years ago
Johannes Wollert 888262b8d4 fixes specs 11 years ago
Johannes Wollert d851757ec3 work packages can no longer be assigned to inactive priorities 11 years ago
Johannes Wollert 8b096975fe updates copyright headers 11 years ago
Philipp Tessenow dc496cfa82 Update planning_elements_controller.rb 11 years ago
Philipp Tessenow 3dc6c54199 now that the Query#name validation works, we have to provide names for generated queries... 11 years ago
Sebastian Schuster 11a566a044 Removed now-redundant specification of Status sort order 11 years ago
Philipp Tessenow 10b62ca681 fix #4858 11 years ago
Sebastian Schuster 31de0b0626 Fixed 500 passing the note parameter on work package create 11 years ago
Sebastian Schuster 7f7cd4a60f Fixed blocks vanishing after adding blocks to the default layout 11 years ago
Markus Kahl 473b595fbc fixes pagination for postgres 11 years ago
Sebastian Schuster a6d820c219 Fixed wrong pagination links on ajax requests to members controller 11 years ago
Jonas Heinrich 7b85175427 redirecting to destroy info if not deleting 11 years ago
Jonas Heinrich 735f50b6f5 redirecting even if not deleting 11 years ago
Markus Kahl 7d39b14d74 export timelog csv in utf-8 11 years ago
Markus Kahl 88b5d4f94a send charset information in response for wp csv 11 years ago