10760 Commits (9c47f22a3c812cf3add7c2e637ba766984f9b9e8)

Author	SHA1	Message	Date
Oliver Günther	a6b4372b09	Always preprocess URLs with CGI.unescape ... This forces redirect URLs to always pass through the escaping process, in order to process escaped paths (`/mysubdir/%2E%2E/secret/`).	9 years ago
Oliver Günther	fcd450af3f	Fix redirect vulnerability ... `redirect_back_or_default` was vulnerable to some of the URLs found to be vulnerable in redmine, such as `@test.foo`. This commit extracts the whole functionality into a policy and alters the constraints with a path check to avoid these cases. Thanks to @marutosi for pointing this out. http://www.redmine.org/projects/redmine/repository/revisions/14560	9 years ago
Jonas Heinrich	f019c795a1	Adds an example	9 years ago
Jonas Heinrich	0f4ae5b056	Adds section about child pages macro	9 years ago
Evghenii Barhatov	6ceb63b2b7	Pass user_id instead of whole User model object in DeleteUserJob	9 years ago
Jens Ulferts	6e01b27f18	rename service's method to be in accordance with proc	9 years ago
Jens Ulferts	c471080e08	set locale before API v3 request ... The mechanism was extracted from the rails stack where the locale is taken based on (in that order): * The user's preferences * The accept_language header * The system settings Only languages, that are enabled by the instance are valid. If one is selected (e.g user preference), that is not enabled by the instance, a fallback is taken.	9 years ago
Jens Ulferts	e87b53639a	enable no_self_notification per default	9 years ago
Jens Ulferts	ca2e9e258f	disable required fields when making them invisible	9 years ago
Evghenii Barhatov	c4b3c3b1a0	Adjust the top of HTML tooltips for small elements	9 years ago
Evghenii Barhatov	57b4127d1c	Fix change password form ... Make fields required. Adapt fields to the attribute aria-describedby.	9 years ago
Evghenii Barhatov	930bfc9855	Use aria-describedBy attribute for html tooltips ... Show tooltips for focused elements.	9 years ago
Jan Sandbrink	0242925b6d	prevent too long Request-URLs for many watchers ... turn back to the older behaviour of only sending checked checkboxes, which is favorable when there are many watchers available. Otherwise changing the type (which issues a GET request) creates too long URLs for many watchers. A scalable alternative could be to issue a POST request, but we only have so much time and the legacy view is already deprecated...	9 years ago
Jan Sandbrink	07705ae1c4	correctly recognize bad LDAP credentials in test ... - also raise when testing connection of an abstract auth source, avoiding wrong success messages	9 years ago
Jan Sandbrink	ab68d10aaa	fix "new authentication mode" link ... previously always lead to the abstract AuthSource, which does not provide much use. Now it will lead to the apropriate form of the subclass.	9 years ago
Evghenii Barhatov	d593cf8f4c	Include tooltips.js into style guide	9 years ago
Jens Ulferts	c330fc2152	fix wp table height on flash	9 years ago
Evghenii Barhatov	07c6ae49ee	Update HTML tooltips Living Style Guide	9 years ago
Evghenii Barhatov	27fdf71491	Make advanced-tooltips more universal	9 years ago
Evghenii Barhatov	752cb16c19	Fix change-password form ... Fix render_password_complexity_tooltip when the rules present. Fix sandwiched labels on change-password form.	9 years ago
Evghenii Barhatov	601bee6281	Fix advanced-tooltips ... Fix advanced-tooltips for FireFox and IE. Make advanced-tooltips independent on container's size. Stylize advanced-tooltips.	9 years ago
Markus Kahl	dd496297fd	don't use random language as user's language ... If a user's language is not set ('') the code just used any valid language.	9 years ago
Jens Ulferts	67d8e7f240	remove DefaultData::Loader from source ... All of it is now handled by db:seed which needs to run anyway	9 years ago
Jens Ulferts	3e3243fd6b	move seeding functionality from loader and classes	9 years ago
Oliver Günther	f03008ec94	Require admin for destroy_info	9 years ago
Solotchi Veaceslav	7d8aaa9c31	Fixes related to code review	9 years ago
Oliver Günther	933c553ba9	Improve settings for mail, sys web services to improve comprehension. ... This commit provides: - Improved labels for mail_handler and sys api to spell out `WS`. - Added instruction below the both checkboxes with a brief introduction on what this setting actually does.	9 years ago
Solotchi Veaceslav	6c73856ede	Adjust the css selector name	9 years ago
Solotchi Veaceslav	7fd856808e	Create custom tooltip that support html	9 years ago
Jens Ulferts	eacd8a4130	remove last login information from user page	9 years ago
peter	6a7ab0edb8	fix invalid response for /api/v2/authentication.json	9 years ago
Jens Ulferts	34928de9c9	no reload on timelog delete ... Please refer to https://docs.angularjs.org/api/ng/directive/ngHref for the different combinations of href, ng-href and ng-click within an a tag.	9 years ago
Markus Kahl	bcd981df5c	consider X-Authentication-Scheme; opt scoped realm	9 years ago
Markus Kahl	d854df5175	suppress browser prompt on authenticate failure	9 years ago
Jan Sandbrink	9f4ebc04a5	fix moving of WPs without specifying a status ... attributes without a value are actually represented by empty strings. Thus only take the status_id if it is :present? (the inverse of :blank?)	9 years ago
Jan Sandbrink	9eb7cfbe9b	actually allow the status to be set while moving ... apparently the status_id param was set to expect an array of values while being moved in this commit: d7f399ab8d Probably because the spec started to expect that when it was moved to be an RSpec test. I am not sure if this was ever a valid thing outside the tests...	9 years ago
Jan Sandbrink	2fbbccb50c	move error handling up ... RecordNotFound would now already occur due to :recipient call in :perform method.	9 years ago
Jan Sandbrink	4bee848f3d	style	9 years ago
Jan Sandbrink	7d634d57ad	execute mail jobs in context of their recipient	9 years ago
Jan Sandbrink	95c0d0a013	pull recipient & author up into MailNotificationJob	9 years ago
Jan Sandbrink	d43803ce85	use more specific names than user ... author and recipient are matching the domain they are employed in (mail delivery) closer. Especially the name 'current_user' only happens to be the thing being assigned as author, but does not transport any special meaning in itself.	9 years ago
Jan Sandbrink	0c3562ce49	fix whitespacing in '_issue_details.text.erb' ... empty lines and indentation used for code formatting is immediately visible in the resulting output. I tried to employ some special rules to at least allow for usage of indentation.	9 years ago
Jan Sandbrink	c775274707	include missing attributes in mails	9 years ago
Evghenii Barhatov	a609680483	Allow raising exceptions from notification jobs	9 years ago
Oliver Günther	4e666d563a	[ci skip] Fix flickering search by collapsing the search in CSS ... This tiny change should fix the flickering search form in high-load environments by appending `-collapsed` state to the angular element before loading.	9 years ago
Jens Ulferts	fa402cdd58	prevent check-boxes crashing into their label	9 years ago
Jan Sandbrink	b44b0cd2f9	remove details on spent time from project overview	9 years ago
Jens Ulferts	809de73e3c	remove unsafe html_safe	10 years ago
Jens Ulferts	4ae7d5cafa	remove unsafe html_safe	10 years ago
Oliver Günther	676cb6083e	Rewrite search box as angular directive	10 years ago