25 Commits (d0c0fdd871ef62d52b48b55414a318c9b2292683)

Author	SHA1	Message	Date
Oliver Günther	53f2d694ff	Use AnyFixtures to generate fixtures from factories (#7230) ... Uses FactoryBot to keep and maintain specific records in a special transaction that does not get removed after each spec. They automatically are created whenever first hitting them. This makes an excellent time saver for items that are commonly used, such as an admin user account	5 years ago
Henriette Dinger	bd7f4e4814	Update copyright notice	5 years ago
Oliver Günther	d79f5cd7b1	Fix expire_sessions spec	6 years ago
Jens Ulferts	92fbd0bebe	linting	6 years ago
Jens Ulferts	ae5636b754	remove angular-xss gem as angularjs is no longer loaded globally	7 years ago
Oliver Günther	059770f533	FactoryGirl => FactoryBot ... Removes the deprecation	7 years ago
Oliver Günther	46563e1a70	[27462] Pass wiki title to new page if it does not exist (#6299) ... When creating a wiki page from the text with, e.g., `[[Foo Bar]]`, the user gets redirected to wiki#show for a page `foo-bar` (the slug of the title above). He thus loses the title attribute he entered previously. Instead we can pass the title to the new wiki page IFF the page does not exist. https://community.openproject.com/wp/27462 [ci skip]	7 years ago
Oliver Günther	43fce6f768	Fix expected alert error class	7 years ago
Oliver Günther	88a5e787ce	CKEditor5 config and bundle for OP	7 years ago
Oliver Günther	6ef4211e77	Bump copyright to 2018 (#6171) ... [ci skip]	7 years ago
Oliver Günther	a5a5b60235	Don't set the header for feature specs ... It doesn't make sense since we won't send direct API requests anywhere.	7 years ago
Oliver Günther	5d84add246	Expire sessions in warden auth scope	7 years ago
Wieland Lindenthal	a3167b3b39	Fix specs for not having `onbeforeunload` anymore.	8 years ago
Oliver Günther	7cf11bb689	Update copyright notice	8 years ago
Oliver Günther	60cbf95b44	Fix escaping angular expressions when in isolated scope ... Isolated scopes do not inherit from rootScope and thus do not have `DOUBLE_LEFT_CURLY_BRACE`. However, every scope has a reference to the rootScope with `scope.$root` (https://docs.angularjs.org/api/ng/type/$rootScope.Scope)	8 years ago
Oliver Günther	1832ff91f0	[24050] Unescape formattable html strings inserted as ng-bind-html ... The description and all other formattable fields are applied to the dom with `ng-bind-html`. These directives never compile their contents, thus any escaped expression `{{ ... }}` entered by the user is never evaluated. We can either: 1. Compile the content needlessly just to remove escaped expressions. 2. Remove the escaped expression explicitly. This PR implements the second approach. https://community.openproject.com/work_packages/24050/activity	8 years ago
Oliver Günther	7fe77ac223	Add spec for correct escaping in wiki preview	8 years ago
Oliver Günther	5f8ebfdfc6	Add feature spec to test expiry of sessions	8 years ago
Oliver Günther	44a98b8155	Extend xss spec	8 years ago
Oliver Günther	43599a9179	Add feature spec for angular XSS	9 years ago