Commit Graph

3266 Commits (4d39a5c6c3a8893fd506df91d468ce485973aea1)

Author SHA1 Message Date
Martin Czuchra 4d39a5c6c3 Uses en dash to seperate start and end date. 13 years ago
Romano Licker 8c08b5106c replace small "-" with the large "—" one 13 years ago
Romano Licker 2be910f6d1 cut of the description with "…" in issue textile quickinfo links 13 years ago
Romano Licker e3ab381eb4 add tracker to issue quickinfo link according to new specification 13 years ago
Jens Ulferts d2eb9e7f29 harmonized textile help on links with the rest of the help 13 years ago
Romano Licker f6f837e03b adding explanations for the wiki syntax help pages 13 years ago
Jens Ulferts d50dbb62b8 code prettification and xss-vulnarability fixes 13 years ago
Jens Ulferts 66bfa26f63 define 3 lines to be the default description length on issue quick infos 13 years ago
Jens Ulferts 00d50140e4 production mode returns enumerable for String#lines if no block is provided 13 years ago
Romano Licker b39f27cd3b extend issue link macro functionality by ## and ### 13 years ago
Felix Schäfer 2e81aee28b We don't allways want I18n fallbacks 13 years ago
Romano Licker ade3fd1048 enforce date when setting commit_date 13 years ago
Romano Licker 422705c5de fixes attachment partial on windows browsers 13 years ago
Jens Ulferts 47454dd7e5 making successful saving a condition for a success response on member edit 13 years ago
jwollert 068e3048c4 display summary in news#index if we got one. if not, display a short version of the news text 13 years ago
jwollert 65b384db2e unify issues bulk update form. code for custom fields now looks just like standard issue fields' 13 years ago
Martin Linkhorst 3e034514f6 re-allow mass assignment of assign_to_id of issue categories. but issue category won't be valid unless assignee is also project member of the category. (mirroring what is possible to select in the view) fixes #28790 13 years ago
Romano Licker d9069356e1 display errors correctly when adding a member to a project 13 years ago
Romano Licker 01f8886a63 fixes: couldn't switch roles on a user & ensure correct 13 years ago
Romano Licker e2d7bde493 fixing copying of members (while copying a project) 13 years ago
Jens Ulferts ce0bdc8abd add start_date to save attributes, validate it as date format 13 years ago
Jens Ulferts 3511600c0a adjust members_controller to work with the protected attributes 13 years ago
Martin Linkhorst 284f689bd7 nested tab attributes are safe, one cannot fake project_id, nor wiki_id 13 years ago
Romano Licker 73c087e19c reset author to current user when copying an issue 13 years ago
Romano Licker eaba2414cf add label "Move issue" for breadcrumb 13 years ago
Martin Linkhorst fa26c9ceee remove login explicitly from attributes hash since it is protected 13 years ago
Martin Linkhorst 34dbfb2c83 don't use mass assignment for login field, somebody added it to attr_protected 13 years ago
Martin Linkhorst 235fe06944 use safe attributes rather than mass assignment directly 13 years ago
Romano Licker 44f48962bf automatically fill the parent_id field when duplicating an issue 13 years ago
jwollert 7681d943ad fixes copying projects 13 years ago
jwollert 105ef24862 fixes creation of member_roles 13 years ago
jwollert d9f6b52029 protect relations to users (assigned_to, author_id etc.) in models, too 13 years ago
Martin Linkhorst 337561261a some documentation regarding mass assignment, show full stack trace in console 13 years ago
Martin Linkhorst 696ed97dcd fix: use the old style #force_attributes 13 years ago
Martin Linkhorst 12bb66c264 refactor dealing with mass assignment 13 years ago
Martin Linkhorst 42bc728288 fix to work with protected :project_id 13 years ago
jwollert e0a2b9e768 fixes creation of anonymous user. shouldn't mass assign protected attributes (i.e. login) 13 years ago
Martin Linkhorst 1fce5b6a8f added attr_protected calls to protect mass assignment of :project_id through a view 13 years ago
Jean-Philippe Lang f5ac69401d Set user_id as a protected attribute (#922). 13 years ago
Jean-Philippe Lang a6a95c8617 Prevent mass-assignment vulnerability when adding/updating a wiki (#922). 13 years ago
Jean-Philippe Lang 5c6fbc664b Prevent mass-assignment vulnerability when adding/updating a version (#922). 13 years ago
Jean-Philippe Lang 42caba0351 Prevent mass-assignment vulnerability when adding/updating a time entry (#922). 13 years ago
Jean-Philippe Lang ff5472e6f7 Use safe_attributes= just like in #create. (#922) 13 years ago
Jean-Philippe Lang 676bf0f751 Prevent mass-assignment vulnerability when adding/updating a news (#922). 13 years ago
Jean-Philippe Lang 4156485090 Prevent mass-assignment vulnerability when adding/updating a forum message (#922). 13 years ago
Jean-Philippe Lang 8e6f54c4ec Prevent mass-assignment vulnerability when adding a project member (#922). 13 years ago
Jean-Philippe Lang 6b25085997 Prevent mass-assignment vulnerability when adding/updating an issue category (#922). 13 years ago
Jean-Philippe Lang 21c498557e Prevent mass-assignment vulnerability when adding/updating a document (#922). 13 years ago
Jens Ulferts df082b5ebf setting values of attributes not translated to nil 13 years ago
Jens Ulferts 0c6ddd8030 adding comment 13 years ago