53608 Commits (d680b329c5fb42dbc6cc9e5ade2ab283d99b2be0)

 

All Branches   

Search

Author	SHA1	Message	Date
Oliver Günther	0ae17cb21d	Merge pull request #7862 from opf/fix/31643/journal-meeting-contents ... [31643] Don't try to render attachments on meeting content journal [ci skip]	5 years ago
Oliver Günther	6b0bc944ca	[31643] Don't try to render attachments on meeting content journal ... https://community.openproject.com/wp/31643	5 years ago
Oliver Günther	d2cece3e11	Merge pull request #7863 from opf/fix/sentry-issues ... Fix/sentry issues [ci skip]	5 years ago
ulferts	17bd411b53	adapt the api authorization to the bcf api	5 years ago
Oliver Günther	897539725a	Ignore ui-router transitions	5 years ago
Oliver Günther	c331f42ef6	Handle string messages ... avoids "undefined" errors	5 years ago
Oliver Günther	0c4cff0bb0	Use correct js.error namespace	5 years ago
Oliver Günther	83bc69e26e	Make url_query extra due to size	5 years ago
Oliver Günther	91b4967361	Merge pull request #7861 from opf/fix/null-access-to-config-object ... Prevent null access to config object [ci skip]	5 years ago
Oliver Günther	7063149006	Prevent null access to config object	5 years ago
Markus Kahl	4c3efeaa0a	don't throw exception on invalid query selector	5 years ago
Oliver Günther	4d760c383b	Merge pull request #7859 from opf/fix/json-cyclic-conversion ... Avoid trying to call JSON.stringify on HalResources [ci skip]	5 years ago
Henriette Dinger	4baaf44b22	Bumped version to 10.2.1 ... [ci skip]	5 years ago
ulferts	3a89fceb0d	error handling in bcf v2.1	5 years ago
ulferts	ded413a25a	shorten project visibility check	5 years ago
ulferts	c6b17e8a7a	extract root api into separate superclass	5 years ago
ulferts	9af15711ef	introduce bcf project end point	5 years ago
ulferts	8ed1d8d2f1	Merge pull request #7857 from opf/fix/double-reset-sessions ... Fix resetting the session for non-html requests	5 years ago
Markus Kahl	1cfa07aa35	don't throw exception on invalid query selector	5 years ago
Oliver Günther	b07058364c	Avoid trying to call JSON.stringify on HalResources ... Zone.js does this as a default zone rejection handler, and checks for the presence of a custom `toString` method.	5 years ago
Travis CI User	b05973b30a	update locales from crowdin [ci skip]	5 years ago
Travis CI User	722b331b4a	update locales from crowdin [ci skip]	5 years ago
Travis CI User	f36df17efd	update locales from crowdin [ci skip]	5 years ago
Travis CI User	9536d41b99	update locales from crowdin [ci skip]	5 years ago
Oliver Günther	a661c5c706	Merge pull request #7858 from opf/housekeeping/production-sourcemaps ... Use sourcemaps for production angular builds for sentry [ci skip]	5 years ago
Oliver Günther	0016db6ed4	Use sourcemaps for production angular builds for sentry	5 years ago
Oliver Günther	91ecb3ba1e	Fix resetting the session for non-html requests ... this caused a CSRF issue on saas. Requests were being redirected to /admin/subscriptions/expired and wrongfully so for API and CSS requests. Now imagine a request to `/` with `login_required` for a non-logged in user 1. The GET `/` request is redirected to `/login?back_url=...` by ApplicationController. Session is reset here to X 2. The user receives the login form with CSRF value from session X 3. A request is made to `/api/v3/configuration` from the frontend. It too is redirected to a Rails controller and ends up in the same `check_if_login_required` flow, resetting the session again 4. The user now has a session cookie Y, but the CSRF form is still from X 5. submitting it results in 422 CSRF validation error	5 years ago
ulferts	720565a4ac	adapt spec to changes in delayed	5 years ago
Oliver Günther	3150ad6c69	Bump dev branch ... [ci skip]	5 years ago
ulferts	1f071a1d79	Merge pull request #7854 from opf/fix/31609/make-system-user-active ... [31609] Make system user active	5 years ago
Oliver Günther	51e8387e78	Remove builtin status ... [ci skip]	5 years ago
ulferts	25ac805ac3	Merge branch 'release/10.1' into dev	5 years ago
ulferts	87eac68ce3	attempt to stabilize flickering spec	5 years ago
Oliver Günther	020b5100ca	Merge pull request #7856 from opf/fix/bump_loofah ... bump loofah because of CVE [ci skip]	5 years ago
Oliver Günther	33454926e2	Merge pull request #7855 from opf/fix/default_order_regex ... increase strictness on regexp for default orders [ci skip]	5 years ago
Oliver Günther	56a75602a6	[31609] Make system user active	5 years ago
ulferts	9e2f651d4a	bump loofah because of CVE ... https://nvd.nist.gov/vuln/detail/CVE-2019-15587	5 years ago
ulferts	00a31728fc	increase strictness on regexp for default orders ... Otherwise partial matches would also count e.g. is_public matches as public is a substring.	5 years ago
Oliver Günther	7673dd5dd2	Merge pull request #7846 from opf/fix/n+1_queries_on_wp_form ... Fix/n+1 queries on wp form [ci skip]	5 years ago
Oliver Günther	8fe51ea9e3	Merge pull request #7852 from opf/fix/copy_project_button_permission_check ... only require copy_project permission to show button [ci skip]	5 years ago
Markus Kahl	c98a8ea33c	Merge pull request #7853 from opf/fix/hook-exceptions ... Don't break application if a hook fails	5 years ago
Oliver Günther	5c858815d9	Merge pull request #7851 from opf/fix/notification_box_position ... move notification box higher [ci skip]	5 years ago
Oliver Günther	e77162c1dd	Don't break application if a hook fails	5 years ago
ulferts	c96c5b89d5	only require copy_project permission to show button	5 years ago
ulferts	4ed1dbe7f7	rewrite legacy specs for wiki_content	5 years ago
ulferts	c80c430801	attempt to fix flickering spec	5 years ago
Oliver Günther	ee0bbcd043	Use deliver_now in test mail ... [ci skip]	5 years ago
ulferts	8d0ae7ad46	move notification box higher	5 years ago
Oliver Günther	f88d7bcf23	Merge pull request #7849 from opf/fix/bump_rspec_gems ... bump rspec gems [ci skip]	5 years ago
ulferts	1d7f013f89	rewrite legacy status specs	5 years ago