13330 Commits (bf003f644e6e4766b77556abb2ba29b3e03555f7)

Author	SHA1	Message	Date
Jens Ulferts	1c5e73a993	handle non existent param	8 years ago
Henriette Dinger	5a2a740cf5	Update icon font	8 years ago
Jens Ulferts	5c73efc616	rely on url_for to fill in request's parameters on session timeout back url	8 years ago
Jens Ulferts	c00a2602e2	fix permitting custom field value params	8 years ago
Jens Ulferts	3a8e5e0268	rely on url_for to fill in request's parameters on activity index	8 years ago
Jens Ulferts	2dd3a9a339	use AR .arel_table to avoid deprecation	8 years ago
Oliver Günther	f0cf73e6b3	Remove non-whitelisted params use in activity view	8 years ago
Oliver Günther	47cf64f46e	Avoid checking for Hash on params	8 years ago
Oliver Günther	40775a3e2b	params is now of type ActionController::Parameters	8 years ago
Oliver Günther	16afe96224	Remove unwhitelisted references to params in url_for	8 years ago
Oliver Günther	7e8f21f5a6	Check presence on RolePermission	8 years ago
Oliver Günther	117dfa4e2d	Legacy: Fix functional projects controller spec	8 years ago
Jens Ulferts	20a9eddea9	rely on url_for to fill in request's parameters on atom feed	8 years ago
Jens Ulferts	339d1025ee	rely on url_for to fill in request's parameters on sort urls	8 years ago
Jens Ulferts	84e86b22b5	rely on url_for to fill in request's parameters on calendar url	8 years ago
Jens Ulferts	daa2d07e4b	rely on url_for to fill in request's parameters on back url	8 years ago
Oliver Günther	4224430a9e	Unescape HTML entities after `strip_tags`	8 years ago
Jens Ulferts	24e285f05e	do not provide params explicilty - use those sanitized by rails ... We used to pass in the params but rails will already provide the missing parameters in url_for. And those that are provided are sanitized.	8 years ago
Oliver Günther	2cc285251a	Fix invalid self-reference	8 years ago
Oliver Günther	9b3d346186	Fix rabl spec	8 years ago
Oliver Günther	2ae7fe7fa4	Fix template extension	8 years ago
Jens Ulferts	db6d2c6ffd	use project.id specifically to avoid db error	8 years ago
Jens Ulferts	181514742f	replace observers by moving functionality inside the observed object ... The observers should have been removed a long time ago and with rails 5 there is https://github.com/rails/rails-observers/issues/52 to consider as well.	8 years ago
Jens Ulferts	3b9df1f3e0	adapt sanitizer used	8 years ago
Jens Ulferts	05f0bc2a5b	replace deprecated merge!	8 years ago
Jens Ulferts	b129f14079	replace removed method AR method #type_cast_from_database	8 years ago
Oliver Günther	8c42f5ae35	Fix invalid find_project_by_project_id	8 years ago
Oliver Günther	7994631440	Use unreleased version of friendly_id and fix project finder	8 years ago
Jens Ulferts	6f6598bd84	delete_all and reload rails 5 way	8 years ago
Jens Ulferts	d106fcf226	don't raise if disable_api has never been defined	8 years ago
Jens Ulferts	693090136d	normalize permissions ... With rails 5 it is no longer possible to create an sql like statement via arel which will check whether a serialized array contains a string. AR will only allow to create a match against an array if the column itself is marked to serialize an array. Because of this and in order to increase the normalization of the data, the permissions are no longer serialized and are moved into a separate table instead. While this is still not normalized, it satisfies the needs	8 years ago
Oliver Günther	06af06c083	Remove skip_before_action that does not exist in an V2 controller	8 years ago
Oliver Günther	b8b0862bad	Replace after_filter with after_action ... and remove unused assertions	8 years ago
Jens Ulferts	a17758e474	reload association rails 5 style	8 years ago
Jens Ulferts	d22809e5a2	remove skipping before action that was never added	8 years ago
Jens Ulferts	bf7343c312	replace perfectly sane hack for really dirty one	8 years ago
Jens Ulferts	ffc4737ada	no longer pass two attributes to ActiveRecord::Base#initialize	8 years ago
Oliver Günther	07420ed62e	Use strings for filter values in backend and frontend ... When initializing a query from id, ID values (e.g., version) are integers, with query_props (and thus, URL params), they are returned as strings. This causes an invalid selected value starting with Angular 1.4 due to the correct typing of ngoptions.	8 years ago
Oliver Günther	9135be7306	[23948] Add icon-document for documents activity ... Fixes https://community.openproject.com/work_packages/23948 [ci skip]	8 years ago
Oliver Günther	fe0e8dd919	Rename before_filter to before_action	8 years ago
Jens Ulferts	fa37edd2dd	reimplement caching of robots.txt	8 years ago
Oliver Günther	e6c4b12c58	Permit params in back_url ... Rails 5 requires whitelisted params when using them in `url_for`. We might want to consider rewriting this part instead.	8 years ago
Oliver Günther	b72ecf2336	Adjust application middlewares	8 years ago
Oliver Günther	0f6c644b9e	WIP	8 years ago
Markus Kahl	0e54c5fcf6	fix lost grouping in exports; added regression test	8 years ago
Oliver Günther	833b79645b	Remove unused method	8 years ago
Oliver Günther	6cad072dc8	Fix reference to global UserSession in dev mode ... [ci skip]	8 years ago
Oliver Günther	59da2c6175	Actually rehash on the correct object instance ... `becomes!` does not change the current object (how would it?), so we need to call `hash_password!` on the object returned from it. This also extends the false positive test. The rehash actually happened, but it was hashing the plain as a legacy SHA-1 again.	8 years ago
Oliver Günther	fff21a1229	UserPasswords: Replace salted SHA-1 with bcrypt ... This adds a typed userpassword class for Bcrypt password hashes that replace the previous default of salted SHA1. It still provides a class for SHA1 passwords, however new passwords of that type may no longer be created directly, and passwords are checked whether to upgrade them on every login.	8 years ago
Jens Ulferts	03c61fc000	use lodash clone instead of prototype	8 years ago