TheDude
/
openproject
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
13030 Commits
139 Branches
203 Tags
1.2 GiB
Tag: Branch: Tree: f1d10dd940
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'f1d10dd940'
${ noResults }
Commit Graph

2025 Commits (f1d10dd940a4c63ac2df1b53d33bc7e9ce5880b3)

Author SHA1 Message Date
Christian Ratz a452abc731 fixes repo auth
10 years ago
Hagen Schink cce653d1e2 Replace unless by if
10 years ago
slawa 13ceb4edf8 Treat case when no name or identifier was provided
10 years ago
Martin Linkhorst 8877883c63 given openproject runs in a subdirectory we cannot allow redirecting to a different subdirectory. also tries to catch shenanigans to circumvent the check like ".." in the path.
10 years ago
Philipp Tessenow a7b021d010 re-integrate repository_authentication plugin
10 years ago
Sebastian Schuster d13ccc572e Fixes on the fly version creation
11 years ago
Martin Linkhorst 1f36d43b70 there was a wrong parenthesis: the last match needs to be ANDed with all the prior checks. instead of changing it, refactored the code to be more clear. still allows redirects to different sub-uris.
11 years ago
Philipp Tessenow d8cb82a2e8 explicitly allow home path in back_url
11 years ago
Philipp Tessenow 0cdbaf39f6 fix protocol-relative redirection test
11 years ago
jplang 1db8642ac6 [security] fixed back url verification
11 years ago
Hagen Schink 181347566c Let anonymous user access public custom fields
11 years ago
Hagen Schink c87cf9b7bf Remove duplicate WP custom fields
11 years ago
Hagen Schink 5065215415 Filter WP custom fields by membership
11 years ago
Hagen Schink 6ce1f68d7e Deny anonymous access
11 years ago
Hagen Schink 6f0dd06861 Preview caption reflects the previewed attribute
11 years ago
Hagen Schink a26445babf Authorize preview object access
11 years ago
Hagen Schink 5eaf9050e0 Reset order of preview texts
11 years ago
Hagen Schink 21c97b11a2 Authorize through #find_optional_project
11 years ago
Hagen Schink 33656a7456 Fix work package preview permission
11 years ago
Hagen Schink 3a58ad5cb4 Fix preview
11 years ago
Ion Biziiac 4a13ce44c3 Fix APIv2 does not rewire parents correctly
11 years ago
Jens Ulferts 90e1a9863e reduces memory and increases performance of api planning_element#index
11 years ago
Hagen Schink 8c144050e4 Move copy project implementation to DJ
11 years ago
Hagen Schink 47e1b136b1 Allow to extend list of scripts by plug-ins
11 years ago
Ion Biziiac 0236f08c63 Fix default work package status destroy
11 years ago
Martin Linkhorst fb096b0c86 infer content type from contents of file instead of its file extension
11 years ago
Toshi MARUYAMA 4775f66e77 fix non-ascii attachment file name get corrupted in IE11 (#16711)
11 years ago
Jean-Philippe Lang b8ffa31e1a Potentiel data leak in "Invalid form authenticity token" error screen (#16511).
11 years ago
Till Breuer fc38f8e16a Don't preselect inactive default priorities for new work packages
11 years ago
Till Breuer 1e29f9fb3a Fix duplication of work package priority in priority drop down
11 years ago
Christian Ratz 6b3f7c4dc8 Removed path from guessed host
11 years ago
Johannes Wollert 888262b8d4 fixes specs
11 years ago
Johannes Wollert d851757ec3 work packages can no longer be assigned to inactive priorities
11 years ago
Johannes Wollert 8b096975fe updates copyright headers
11 years ago
Philipp Tessenow dc496cfa82 Update planning_elements_controller.rb
11 years ago
Philipp Tessenow 3dc6c54199 now that the Query#name validation works, we have to provide names for generated queries...
11 years ago
Sebastian Schuster 11a566a044 Removed now-redundant specification of Status sort order
11 years ago
Philipp Tessenow 10b62ca681 fix #4858
11 years ago
Sebastian Schuster 31de0b0626 Fixed 500 passing the note parameter on work package create
11 years ago
Sebastian Schuster 7f7cd4a60f Fixed blocks vanishing after adding blocks to the default layout
11 years ago
Markus Kahl 473b595fbc fixes pagination for postgres
11 years ago
Sebastian Schuster a6d820c219 Fixed wrong pagination links on ajax requests to members controller
11 years ago
Jonas Heinrich 7b85175427 redirecting to destroy info if not deleting
11 years ago
Jonas Heinrich 735f50b6f5 redirecting even if not deleting
11 years ago
Markus Kahl 7d39b14d74 export timelog csv in utf-8
11 years ago
Markus Kahl 88b5d4f94a send charset information in response for wp csv
11 years ago
Markus Kahl b1ccd322c9 encode csv export in UTF-8
11 years ago
Martin Linkhorst b05f104261 make those tests pass :)
11 years ago
Philipp Tessenow 16d8ede493 use permitted params for board
11 years ago
Martin Linkhorst 6f21ef73ad move application controller load hook to the end of the class definition. find explanation why inside.
11 years ago