Commit graph

1871 commits

Author SHA1 Message Date
Marcin Kuzminski
53ba18b654 dependencies: bumped cprofileV to 1.0.7 2017-06-29 16:50:16 +02:00
Marcin Kuzminski
db555b8f6e dependencies: bumped ipdb to 0.10.3 2017-06-29 16:49:25 +02:00
Marcin Kuzminski
926dd3237e dependencies: bumped supervisor to 3.3.2 2017-06-29 16:45:08 +02:00
Marcin Kuzminski
ab3659e457 dependencies: bumped subprocess32 to 3.2.7 2017-06-29 16:43:45 +02:00
Marcin Kuzminski
ad2004ac5c dependencies: bumped pathlib2 to 2.3.0. 2017-06-29 17:07:26 +02:00
Marcin Kuzminski
8a040cbb2d dependencies: bumped http servers including gunicorn.
gunicorn==19.7.1
waitress==1.0.2
uWSGI==2.0.15
2017-06-29 12:50:02 +02:00
Marcin Kuzminski
70d6ec0595 dependencies: bumped gevent to 1.2.2 together with greenlet to 0.4.12 2017-06-29 12:49:02 +02:00
Marcin Kuzminski
faee019853 dependencies: bumped test libraries.
pytest==3.1.2
py==1.4.34
pytest-cov==2.5.1
pytest-sugar==0.8.0
pytest-runner==2.11.1
pytest-profiling==1.2.6
2017-06-29 12:40:20 +02:00
Marcin Kuzminski
2e2a951700 dependencies: bumped venusian to 1.1.0 2017-06-29 12:37:49 +02:00
Marcin Kuzminski
4943b2cd12 dependencies: bumped ptyprocess to 0.5.2 2017-06-29 12:30:45 +02:00
Marcin Kuzminski
cad285e74a dependencies: bumped testpath to 0.3.1 2017-06-29 12:30:00 +02:00
Marcin Kuzminski
4f7db8cecf nix: bumped version to 4.9.0 2017-06-29 12:28:34 +02:00
Marcin Kuzminski
f6a7b35864 release: Bump version 4.8.0 to 4.9.0 2017-06-29 11:46:59 +02:00
Marcin Kuzminski
d3babfbf89 release: merge back stable branch into default 2017-06-29 11:46:54 +02:00
Marcin Kuzminski
711278bd27 docs: small rst fixes. 2017-06-29 11:36:13 +02:00
Marcin Kuzminski
3ff7d208b8 Added tag v4.8.0 for changeset 9731914f8976 2017-06-28 22:03:49 +02:00
Marcin Kuzminski
7f12c82a1e release: Finish preparation for 4.8.0 2017-06-28 22:03:47 +02:00
Marcin Kuzminski
053c523bd7 release: updated pip2nix output for 4.8.0 2017-06-28 22:03:26 +02:00
Marcin Kuzminski
a77dc3e328 i18n: Update compiled message objects and js i18n files 2017-06-28 21:57:54 +02:00
Marcin Kuzminski
a6bbaf210c i18n: Pulled translation from Transifex 2017-06-28 21:57:07 +02:00
Marcin Kuzminski
045b9e6aa5 i18n: Updated message catalog template 2017-06-28 21:55:56 +02:00
Marcin Kuzminski
66eefae578 release: Merge default into stable for release preparation 2017-06-28 21:55:11 +02:00
Marcin Kuzminski
3341c88c61 docs: added changelog for 4.8.0 release. 2017-06-27 16:52:35 +02:00
Marcin Kuzminski
44c4d628dd docs: fix for contribution docs. 2017-06-27 23:45:33 +02:00
Marcin Kuzminski
33b557522f i18n: generated new translation files 2017-06-27 17:26:40 +02:00
Marcin Kuzminski
eb83813cc9 dependencies: bumped objgraph to 3.1.0. 2017-06-28 14:01:46 +02:00
Marcin Kuzminski
f53db19687 diffs: simplified the datastructure of fillediff. Hopefully this
will allow better Garbage Collection.
2017-06-28 14:03:57 +02:00
Daniel Dourvaris
372c7c267c tooltip: use consistent h.tooltip usage to set tooltips. 2017-06-28 21:02:21 +02:00
Marcin Kuzminski
f123e5af43 manifest: added ee_features directory for images 2017-06-27 21:02:25 +02:00
Marcin Kuzminski
8ed9abe306 docs: updated api documentation 2017-06-27 17:19:54 +02:00
Marcin Kuzminski
002332dbc2 markup-renderer: use safe fetching of attributes to prevent from errors on malformed html. 2017-06-27 15:44:49 +02:00
Marcin Kuzminski
2500061c51 auth-token: only delete token if it exists. 2017-06-26 13:55:07 +02:00
Marcin Lulek
cb6d81f435 security: escape flash messaged VCS errors to prevent XSS atacks. 2017-06-26 14:48:15 +02:00
Marcin Kuzminski
5fc0ee97f9 docs: added CI integration docs. 2017-06-23 15:06:31 +02:00
Marcin Kuzminski
fb20d49bf1 docs: updated repo extra fields documentation. 2017-06-23 15:06:22 +02:00
Marcin Kuzminski
710d7ad0b5 docs: updated webhook documentation. 2017-06-23 15:06:05 +02:00
Marcin Kuzminski
ccf69ffec7 audit-logs: don't use old style parser for new audit logs. 2017-06-23 12:22:39 +02:00
Marcin Kuzminski
c315ee8d30 security: use custom writer for RST rendering to prevent injection of javascript: tags. 2017-06-23 11:45:51 +02:00
Marcin Kuzminski
9c7ed2caf3 user-api: use simple schema validator to be consistent how we validate between API and web views. 2017-06-21 15:36:24 +02:00
Marcin Kuzminski
749f784ad9 user-group-api: use simple schema validator to be consistent how we validate
user group names during creation between API and WEB.
2017-06-21 13:28:12 +02:00
Marcin Lulek
af07c911dc security: use safe escaped version of description for repo and repo group to potentially
prevent any XSS attacks on returned data.
2017-06-21 12:23:46 +02:00
Marcin Kuzminski
25436a7365 audit-logs: implemented full audit logs across application.
- Fixes #5321
- Api+web actions
- To be extended while we develop new features.
2017-06-21 12:03:14 +02:00
Marcin Lulek
a9ea42785b security: fix self-xss inside the email add functionality. 2017-06-20 20:59:58 +02:00
Marcin Lulek
3aa700c435 security: escape the returned paths of files and directories.
Nodes function is used for autocomplete in files view, it prevents from
XSS type of attack in file search.
2017-06-20 20:02:24 +02:00
Marcin Lulek
ffb80aaa1a security: use 404 instead of 403 in case missing permissions for comment deletion.
- prevents resource discovery
2017-06-20 19:39:19 +02:00
Marcin Lulek
60285c8c7f security: don't use literal in notifications.
- exposes security problems
- we don't store any html anyway in the subject
2017-06-20 19:09:02 +02:00
Marcin Kuzminski
5c99ddb207 audit-logs: added *basic* support for NOT query term in audit logs. 2017-06-20 16:35:40 +02:00
Marcin Kuzminski
d00d73858a audit-logs: updated action data attrbiutes. 2017-06-20 16:35:14 +02:00
Marcin Kuzminski
e5ba163e0c audit-logs: consistent data between my-account and admin user logs. 2017-06-20 16:06:36 +02:00
Marcin Kuzminski
effa0f53ce users-admin: moved views into pyramid for editing emails and ips.
- added audit-logging
- added few additional tests
2017-06-20 13:53:44 +02:00