53866 Commits (7fbb262e07d76201dd30cc82985a8d639a0d4baa)

 

All Branches   

Search

Author	SHA1	Message	Date
Henriette Dinger	4baaf44b22	Bumped version to 10.2.1 ... [ci skip]	5 years ago
ulferts	3a89fceb0d	error handling in bcf v2.1	5 years ago
ulferts	ded413a25a	shorten project visibility check	5 years ago
ulferts	c6b17e8a7a	extract root api into separate superclass	5 years ago
ulferts	9af15711ef	introduce bcf project end point	5 years ago
ulferts	8ed1d8d2f1	Merge pull request #7857 from opf/fix/double-reset-sessions ... Fix resetting the session for non-html requests	5 years ago
Markus Kahl	1cfa07aa35	don't throw exception on invalid query selector	5 years ago
Oliver Günther	b07058364c	Avoid trying to call JSON.stringify on HalResources ... Zone.js does this as a default zone rejection handler, and checks for the presence of a custom `toString` method.	5 years ago
Travis CI User	b05973b30a	update locales from crowdin [ci skip]	5 years ago
Travis CI User	722b331b4a	update locales from crowdin [ci skip]	5 years ago
Travis CI User	f36df17efd	update locales from crowdin [ci skip]	5 years ago
Travis CI User	9536d41b99	update locales from crowdin [ci skip]	5 years ago
Oliver Günther	a661c5c706	Merge pull request #7858 from opf/housekeeping/production-sourcemaps ... Use sourcemaps for production angular builds for sentry [ci skip]	5 years ago
Oliver Günther	0016db6ed4	Use sourcemaps for production angular builds for sentry	5 years ago
Oliver Günther	91ecb3ba1e	Fix resetting the session for non-html requests ... this caused a CSRF issue on saas. Requests were being redirected to /admin/subscriptions/expired and wrongfully so for API and CSS requests. Now imagine a request to `/` with `login_required` for a non-logged in user 1. The GET `/` request is redirected to `/login?back_url=...` by ApplicationController. Session is reset here to X 2. The user receives the login form with CSRF value from session X 3. A request is made to `/api/v3/configuration` from the frontend. It too is redirected to a Rails controller and ends up in the same `check_if_login_required` flow, resetting the session again 4. The user now has a session cookie Y, but the CSRF form is still from X 5. submitting it results in 422 CSRF validation error	5 years ago
ulferts	720565a4ac	adapt spec to changes in delayed	5 years ago
Oliver Günther	3150ad6c69	Bump dev branch ... [ci skip]	5 years ago
ulferts	1f071a1d79	Merge pull request #7854 from opf/fix/31609/make-system-user-active ... [31609] Make system user active	5 years ago
Oliver Günther	51e8387e78	Remove builtin status ... [ci skip]	5 years ago
ulferts	25ac805ac3	Merge branch 'release/10.1' into dev	5 years ago
ulferts	87eac68ce3	attempt to stabilize flickering spec	5 years ago
Oliver Günther	020b5100ca	Merge pull request #7856 from opf/fix/bump_loofah ... bump loofah because of CVE [ci skip]	5 years ago
Oliver Günther	33454926e2	Merge pull request #7855 from opf/fix/default_order_regex ... increase strictness on regexp for default orders [ci skip]	5 years ago
Oliver Günther	56a75602a6	[31609] Make system user active	5 years ago
ulferts	9e2f651d4a	bump loofah because of CVE ... https://nvd.nist.gov/vuln/detail/CVE-2019-15587	5 years ago
ulferts	00a31728fc	increase strictness on regexp for default orders ... Otherwise partial matches would also count e.g. is_public matches as public is a substring.	5 years ago
Oliver Günther	7673dd5dd2	Merge pull request #7846 from opf/fix/n+1_queries_on_wp_form ... Fix/n+1 queries on wp form [ci skip]	5 years ago
Oliver Günther	8fe51ea9e3	Merge pull request #7852 from opf/fix/copy_project_button_permission_check ... only require copy_project permission to show button [ci skip]	5 years ago
Markus Kahl	c98a8ea33c	Merge pull request #7853 from opf/fix/hook-exceptions ... Don't break application if a hook fails	5 years ago
Oliver Günther	5c858815d9	Merge pull request #7851 from opf/fix/notification_box_position ... move notification box higher [ci skip]	5 years ago
Oliver Günther	e77162c1dd	Don't break application if a hook fails	5 years ago
ulferts	c96c5b89d5	only require copy_project permission to show button	5 years ago
ulferts	4ed1dbe7f7	rewrite legacy specs for wiki_content	5 years ago
ulferts	c80c430801	attempt to fix flickering spec	5 years ago
Oliver Günther	ee0bbcd043	Use deliver_now in test mail ... [ci skip]	5 years ago
ulferts	8d0ae7ad46	move notification box higher	5 years ago
Oliver Günther	f88d7bcf23	Merge pull request #7849 from opf/fix/bump_rspec_gems ... bump rspec gems [ci skip]	5 years ago
ulferts	1d7f013f89	rewrite legacy status specs	5 years ago
ulferts	c73fc1b772	rewrites #format_date legacy specs	5 years ago
ulferts	d12b1e52eb	rewrite codeset_util specs	5 years ago
ulferts	a8bc7b6c18	move @is_leaf resetting to different module	5 years ago
ulferts	b9b72f7204	linting	5 years ago
ulferts	9781a6eb97	adapt specs	5 years ago
ulferts	9b9ee1349a	memoize leaf? method	5 years ago
ulferts	5869966f12	relay available_custom_fields call to cacheable class method ... That way, we avoid n+1 queries for the available custom field especially in scenarios like schemas and api collections where a set of models is queried for their custom fields	5 years ago
Oliver Günther	13c8d2600d	Merge pull request #7850 from opf/fix/31596/use-pristine-resource-for-milestone ... [31596] Use pristine, not projected resource for delta building [ci skip]	5 years ago
birthe	26c759a6b5	Save My Page	5 years ago
Oliver Günther	050011272e	[31596] Use pristine, not projected resource for delta building ... The milestone delta computation must not use the projected resource, as that contains the "would-be" date to be applied. Instead the delta needs to be applied to the original date value https://community.openproject.com/wp/31596	5 years ago
ulferts	4befc236f9	bump rspec gems	5 years ago
ulferts	b1f6531a2e	Merge branch 'release/10.1' into dev	5 years ago