Commit Graph

5807 Commits (7881d740de4112c276bce946eec48ce4313e1f7c)
 

Author SHA1 Message Date
Romano Licker 5bf1c81ecc do not remove text when highlighting in IE 13 years ago
Martin Linkhorst 20f7643187 forgotten locale file from another issue. completely unrelated to mass assignment 13 years ago
Martin Linkhorst 284f689bd7 nested tab attributes are safe, one cannot fake project_id, nor wiki_id 13 years ago
Romano Licker 73c087e19c reset author to current user when copying an issue 13 years ago
Romano Licker eaba2414cf add label "Move issue" for breadcrumb 13 years ago
Martin Linkhorst fa26c9ceee remove login explicitly from attributes hash since it is protected 13 years ago
Martin Linkhorst 34dbfb2c83 don't use mass assignment for login field, somebody added it to attr_protected 13 years ago
Martin Linkhorst 235fe06944 use safe attributes rather than mass assignment directly 13 years ago
Romano Licker 44f48962bf automatically fill the parent_id field when duplicating an issue 13 years ago
Martin Linkhorst 2adf2c9c8e Merge remote-tracking branch 'origin/ma_core' into ma_core 13 years ago
jwollert 3f6cfff4ae uses #force_attributes= in watcher test for mass_assignment 13 years ago
jwollert 57c3e8ac1f uses #force_attributes= in version test for mass_assignment 13 years ago
jwollert a1476a450b uses #force_attributes= in user test for mass_assignment 13 years ago
jwollert 369d528982 uses #force_attributes= in project test for mass_assignment 13 years ago
jwollert 7aa9f1923d uses #force_attributes= in member test for mass_assignment 13 years ago
jwollert c0c3a75e48 uses #force_attributes= in issue test for mass_assignment 13 years ago
jwollert 22e55a6acc uses #force_attributes= for mass assignment in issue_nested_set_test 13 years ago
jwollert 0792a68e92 use #force_attributes= in group_test 13 years ago
jwollert 7681d943ad fixes copying projects 13 years ago
jwollert 105ef24862 fixes creation of member_roles 13 years ago
jwollert d9f6b52029 protect relations to users (assigned_to, author_id etc.) in models, too 13 years ago
Martin Linkhorst 337561261a some documentation regarding mass assignment, show full stack trace in console 13 years ago
Martin Linkhorst 696ed97dcd fix: use the old style #force_attributes 13 years ago
Martin Linkhorst 12bb66c264 refactor dealing with mass assignment 13 years ago
Martin Linkhorst 42bc728288 fix to work with protected :project_id 13 years ago
jwollert e0a2b9e768 fixes creation of anonymous user. shouldn't mass assign protected attributes (i.e. login) 13 years ago
Martin Linkhorst 1fce5b6a8f added attr_protected calls to protect mass assignment of :project_id through a view 13 years ago
Romano Licker 13b8c4ac5c fixes indentation on issue list (subject) 13 years ago
Romano Licker 6ef610aea1 fixes indentation of lists 13 years ago
Jean-Philippe Lang f5ac69401d Set user_id as a protected attribute (#922). 13 years ago
Jean-Philippe Lang a6a95c8617 Prevent mass-assignment vulnerability when adding/updating a wiki (#922). 13 years ago
Jean-Philippe Lang 5c6fbc664b Prevent mass-assignment vulnerability when adding/updating a version (#922). 13 years ago
Jean-Philippe Lang 42caba0351 Prevent mass-assignment vulnerability when adding/updating a time entry (#922). 13 years ago
Jean-Philippe Lang ff5472e6f7 Use safe_attributes= just like in #create. (#922) 13 years ago
Jean-Philippe Lang 676bf0f751 Prevent mass-assignment vulnerability when adding/updating a news (#922). 13 years ago
Jean-Philippe Lang 4156485090 Prevent mass-assignment vulnerability when adding/updating a forum message (#922). 13 years ago
Jean-Philippe Lang 8e6f54c4ec Prevent mass-assignment vulnerability when adding a project member (#922). 13 years ago
Jean-Philippe Lang 6b25085997 Prevent mass-assignment vulnerability when adding/updating an issue category (#922). 13 years ago
Jean-Philippe Lang 21c498557e Prevent mass-assignment vulnerability when adding/updating a document (#922). 13 years ago
Romano Licker cbf04e29b7 set width on main-menu when collapsed 13 years ago
jwollert 3194ed8162 Merge remote-tracking branch 'origin/feature/2.4.0/accessibility-master' into feature/2.4.0/accessibility-master 13 years ago
Jens Ulferts 799a0d37dc prettifying js 13 years ago
Jens Ulferts df082b5ebf setting values of attributes not translated to nil 13 years ago
Jens Ulferts 00e4a3f845 restructuring i18n form js to have inner functions 13 years ago
Jens Ulferts 4397a27b98 allow translations to be deleted when existing attribute is reused for another translation 13 years ago
Jens Ulferts 01a56c29c0 cleanup js: 13 years ago
Jens Ulferts 0c6ddd8030 adding comment 13 years ago
Jens Ulferts 1d1f923306 fixing minor bugs in custom_field: 13 years ago
Jens Ulferts 13813195e9 moving validates_uniqueness_of patch for globalized models into initializers 13 years ago
Jens Ulferts 911682f55c validate default_value in every provided locale 13 years ago