Marcin Kuzminski
|
53ba18b654
|
dependencies: bumped cprofileV to 1.0.7
|
2017-06-29 16:50:16 +02:00 |
|
Marcin Kuzminski
|
db555b8f6e
|
dependencies: bumped ipdb to 0.10.3
|
2017-06-29 16:49:25 +02:00 |
|
Marcin Kuzminski
|
926dd3237e
|
dependencies: bumped supervisor to 3.3.2
|
2017-06-29 16:45:08 +02:00 |
|
Marcin Kuzminski
|
ab3659e457
|
dependencies: bumped subprocess32 to 3.2.7
|
2017-06-29 16:43:45 +02:00 |
|
Marcin Kuzminski
|
ad2004ac5c
|
dependencies: bumped pathlib2 to 2.3.0.
|
2017-06-29 17:07:26 +02:00 |
|
Marcin Kuzminski
|
8a040cbb2d
|
dependencies: bumped http servers including gunicorn.
gunicorn==19.7.1
waitress==1.0.2
uWSGI==2.0.15
|
2017-06-29 12:50:02 +02:00 |
|
Marcin Kuzminski
|
70d6ec0595
|
dependencies: bumped gevent to 1.2.2 together with greenlet to 0.4.12
|
2017-06-29 12:49:02 +02:00 |
|
Marcin Kuzminski
|
faee019853
|
dependencies: bumped test libraries.
pytest==3.1.2
py==1.4.34
pytest-cov==2.5.1
pytest-sugar==0.8.0
pytest-runner==2.11.1
pytest-profiling==1.2.6
|
2017-06-29 12:40:20 +02:00 |
|
Marcin Kuzminski
|
2e2a951700
|
dependencies: bumped venusian to 1.1.0
|
2017-06-29 12:37:49 +02:00 |
|
Marcin Kuzminski
|
4943b2cd12
|
dependencies: bumped ptyprocess to 0.5.2
|
2017-06-29 12:30:45 +02:00 |
|
Marcin Kuzminski
|
cad285e74a
|
dependencies: bumped testpath to 0.3.1
|
2017-06-29 12:30:00 +02:00 |
|
Marcin Kuzminski
|
4f7db8cecf
|
nix: bumped version to 4.9.0
|
2017-06-29 12:28:34 +02:00 |
|
Marcin Kuzminski
|
f6a7b35864
|
release: Bump version 4.8.0 to 4.9.0
|
2017-06-29 11:46:59 +02:00 |
|
Marcin Kuzminski
|
d3babfbf89
|
release: merge back stable branch into default
|
2017-06-29 11:46:54 +02:00 |
|
Marcin Kuzminski
|
711278bd27
|
docs: small rst fixes.
|
2017-06-29 11:36:13 +02:00 |
|
Marcin Kuzminski
|
3ff7d208b8
|
Added tag v4.8.0 for changeset 9731914f8976
|
2017-06-28 22:03:49 +02:00 |
|
Marcin Kuzminski
|
7f12c82a1e
|
release: Finish preparation for 4.8.0
|
2017-06-28 22:03:47 +02:00 |
|
Marcin Kuzminski
|
053c523bd7
|
release: updated pip2nix output for 4.8.0
|
2017-06-28 22:03:26 +02:00 |
|
Marcin Kuzminski
|
a77dc3e328
|
i18n: Update compiled message objects and js i18n files
|
2017-06-28 21:57:54 +02:00 |
|
Marcin Kuzminski
|
a6bbaf210c
|
i18n: Pulled translation from Transifex
|
2017-06-28 21:57:07 +02:00 |
|
Marcin Kuzminski
|
045b9e6aa5
|
i18n: Updated message catalog template
|
2017-06-28 21:55:56 +02:00 |
|
Marcin Kuzminski
|
66eefae578
|
release: Merge default into stable for release preparation
|
2017-06-28 21:55:11 +02:00 |
|
Marcin Kuzminski
|
3341c88c61
|
docs: added changelog for 4.8.0 release.
|
2017-06-27 16:52:35 +02:00 |
|
Marcin Kuzminski
|
44c4d628dd
|
docs: fix for contribution docs.
|
2017-06-27 23:45:33 +02:00 |
|
Marcin Kuzminski
|
33b557522f
|
i18n: generated new translation files
|
2017-06-27 17:26:40 +02:00 |
|
Marcin Kuzminski
|
eb83813cc9
|
dependencies: bumped objgraph to 3.1.0.
|
2017-06-28 14:01:46 +02:00 |
|
Marcin Kuzminski
|
f53db19687
|
diffs: simplified the datastructure of fillediff. Hopefully this
will allow better Garbage Collection.
|
2017-06-28 14:03:57 +02:00 |
|
Daniel Dourvaris
|
372c7c267c
|
tooltip: use consistent h.tooltip usage to set tooltips.
|
2017-06-28 21:02:21 +02:00 |
|
Marcin Kuzminski
|
f123e5af43
|
manifest: added ee_features directory for images
|
2017-06-27 21:02:25 +02:00 |
|
Marcin Kuzminski
|
8ed9abe306
|
docs: updated api documentation
|
2017-06-27 17:19:54 +02:00 |
|
Marcin Kuzminski
|
002332dbc2
|
markup-renderer: use safe fetching of attributes to prevent from errors on malformed html.
|
2017-06-27 15:44:49 +02:00 |
|
Marcin Kuzminski
|
2500061c51
|
auth-token: only delete token if it exists.
|
2017-06-26 13:55:07 +02:00 |
|
Marcin Lulek
|
cb6d81f435
|
security: escape flash messaged VCS errors to prevent XSS atacks.
|
2017-06-26 14:48:15 +02:00 |
|
Marcin Kuzminski
|
5fc0ee97f9
|
docs: added CI integration docs.
|
2017-06-23 15:06:31 +02:00 |
|
Marcin Kuzminski
|
fb20d49bf1
|
docs: updated repo extra fields documentation.
|
2017-06-23 15:06:22 +02:00 |
|
Marcin Kuzminski
|
710d7ad0b5
|
docs: updated webhook documentation.
|
2017-06-23 15:06:05 +02:00 |
|
Marcin Kuzminski
|
ccf69ffec7
|
audit-logs: don't use old style parser for new audit logs.
|
2017-06-23 12:22:39 +02:00 |
|
Marcin Kuzminski
|
c315ee8d30
|
security: use custom writer for RST rendering to prevent injection of javascript: tags.
|
2017-06-23 11:45:51 +02:00 |
|
Marcin Kuzminski
|
9c7ed2caf3
|
user-api: use simple schema validator to be consistent how we validate between API and web views.
|
2017-06-21 15:36:24 +02:00 |
|
Marcin Kuzminski
|
749f784ad9
|
user-group-api: use simple schema validator to be consistent how we validate
user group names during creation between API and WEB.
|
2017-06-21 13:28:12 +02:00 |
|
Marcin Lulek
|
af07c911dc
|
security: use safe escaped version of description for repo and repo group to potentially
prevent any XSS attacks on returned data.
|
2017-06-21 12:23:46 +02:00 |
|
Marcin Kuzminski
|
25436a7365
|
audit-logs: implemented full audit logs across application.
- Fixes #5321
- Api+web actions
- To be extended while we develop new features.
|
2017-06-21 12:03:14 +02:00 |
|
Marcin Lulek
|
a9ea42785b
|
security: fix self-xss inside the email add functionality.
|
2017-06-20 20:59:58 +02:00 |
|
Marcin Lulek
|
3aa700c435
|
security: escape the returned paths of files and directories.
Nodes function is used for autocomplete in files view, it prevents from
XSS type of attack in file search.
|
2017-06-20 20:02:24 +02:00 |
|
Marcin Lulek
|
ffb80aaa1a
|
security: use 404 instead of 403 in case missing permissions for comment deletion.
- prevents resource discovery
|
2017-06-20 19:39:19 +02:00 |
|
Marcin Lulek
|
60285c8c7f
|
security: don't use literal in notifications.
- exposes security problems
- we don't store any html anyway in the subject
|
2017-06-20 19:09:02 +02:00 |
|
Marcin Kuzminski
|
5c99ddb207
|
audit-logs: added *basic* support for NOT query term in audit logs.
|
2017-06-20 16:35:40 +02:00 |
|
Marcin Kuzminski
|
d00d73858a
|
audit-logs: updated action data attrbiutes.
|
2017-06-20 16:35:14 +02:00 |
|
Marcin Kuzminski
|
e5ba163e0c
|
audit-logs: consistent data between my-account and admin user logs.
|
2017-06-20 16:06:36 +02:00 |
|
Marcin Kuzminski
|
effa0f53ce
|
users-admin: moved views into pyramid for editing emails and ips.
- added audit-logging
- added few additional tests
|
2017-06-20 13:53:44 +02:00 |
|