23 Commits (4c89814fcc2b8be1d660e0e350795c7b0c2bea3c)

Author	SHA1	Message	Date
Oliver Günther	d79f5cd7b1	Fix expire_sessions spec	6 years ago
Jens Ulferts	92fbd0bebe	linting	6 years ago
Jens Ulferts	ae5636b754	remove angular-xss gem as angularjs is no longer loaded globally	6 years ago
Oliver Günther	059770f533	FactoryGirl => FactoryBot ... Removes the deprecation	7 years ago
Oliver Günther	46563e1a70	[27462] Pass wiki title to new page if it does not exist (#6299) ... When creating a wiki page from the text with, e.g., `[[Foo Bar]]`, the user gets redirected to wiki#show for a page `foo-bar` (the slug of the title above). He thus loses the title attribute he entered previously. Instead we can pass the title to the new wiki page IFF the page does not exist. https://community.openproject.com/wp/27462 [ci skip]	7 years ago
Oliver Günther	43fce6f768	Fix expected alert error class	7 years ago
Oliver Günther	88a5e787ce	CKEditor5 config and bundle for OP	7 years ago
Oliver Günther	6ef4211e77	Bump copyright to 2018 (#6171) ... [ci skip]	7 years ago
Oliver Günther	a5a5b60235	Don't set the header for feature specs ... It doesn't make sense since we won't send direct API requests anywhere.	7 years ago
Oliver Günther	5d84add246	Expire sessions in warden auth scope	7 years ago
Wieland Lindenthal	a3167b3b39	Fix specs for not having `onbeforeunload` anymore.	8 years ago
Oliver Günther	7cf11bb689	Update copyright notice	8 years ago
Oliver Günther	60cbf95b44	Fix escaping angular expressions when in isolated scope ... Isolated scopes do not inherit from rootScope and thus do not have `DOUBLE_LEFT_CURLY_BRACE`. However, every scope has a reference to the rootScope with `scope.$root` (https://docs.angularjs.org/api/ng/type/$rootScope.Scope)	8 years ago
Oliver Günther	1832ff91f0	[24050] Unescape formattable html strings inserted as ng-bind-html ... The description and all other formattable fields are applied to the dom with `ng-bind-html`. These directives never compile their contents, thus any escaped expression `{{ ... }}` entered by the user is never evaluated. We can either: 1. Compile the content needlessly just to remove escaped expressions. 2. Remove the escaped expression explicitly. This PR implements the second approach. https://community.openproject.com/work_packages/24050/activity	8 years ago
Oliver Günther	7fe77ac223	Add spec for correct escaping in wiki preview	8 years ago
Oliver Günther	5f8ebfdfc6	Add feature spec to test expiry of sessions	8 years ago
Oliver Günther	44a98b8155	Extend xss spec	8 years ago
Oliver Günther	43599a9179	Add feature spec for angular XSS	9 years ago